Description
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when "unsuitable request body data" is used for a different request, possibly related to Java Servlet pages.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.tomcat:tomcat | >= 4.0.1, <= 4.0.6 | — | GHSA-qhqv-q4xg-f6g7 |
| Maven | org.apache.tomcat:tomcat | >= 4.1.0, <= 4.1.36 | — | GHSA-qhqv-q4xg-f6g7 |
References
- http://tomcat.apache.org/security-4.html
- 30908 third-party-advisory
- http://support.apple.com/kb/HT2163
- 15003 vdb-entry
- 239312 vendor-advisory
- ADV-2008-1981 vdb-entry
- 30899 third-party-advisory
- ADV-2008-1979 vdb-entry
- 17019 third-party-advisory
- APPLE-SA-2008-06-30 vendor-advisory
- 30802 third-party-advisory
- JVN#79314822 third-party-advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS05-019_e/01-e.html
- [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ mailing-list