CVE-2007-5333: apache tomcat

Modified

AliasesGHSA-cww4-vj5r-rx57

Published 12-02-2008Last modified 07-08-2024

Vulnerability summary

CVE-2007-5333 is a medium (CVSS 5.0) vulnerability in apache tomcat. EPSS estimates a 62.58% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 09-02-2008)

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

62.58%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 6

RHSA-2009:1164 RHSA-2009:1454 RHSA-2009:1562 RHSA-2009:1563 RHSA-2009:1616 RHSA-2010:0602

Timeline

12-02-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

62.58%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 62.58% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotemultipleVerified
Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Apache1 product

tomcat≥ 4.1.0, ≤ 4.1.36 | ≥ 5.5.0, ≤ 5.5.25 | ≥ 6.0.0, ≤ 6.0.14

Org.apache.tomcat1 product

tomcat≥ 6.0.0, < 6.0.15 | ≥ 5.5.0, < 5.5.26 | ≥ 4.1.0, < 4.1.37

2 vendors · 2 products

References

64 links

www.vupen.com/english/advisories/2008/2690VDB EntryX Refsource VUPENURL RepurposedWEB
secunia.com/advisories/33330Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
tomcat.apache.org/security-4.htmlX Refsource CONFIRMVendor AdvisoryWEB
support.apple.com/kb/HT2163X Refsource CONFIRMThird Party AdvisoryWEB
secunia.com/advisories/30676Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
www.securityfocus.com/bid/27706VDB EntryX Refsource BIDExploitPatchThird Party AdvisoryWEB
securityreason.com/securityalert/3636Third Party AdvisoryX Refsource SREASONBroken LinkWEB
jvn.jp/jp/JVN%2309470767/index.htmlThird Party AdvisoryX Refsource JVNVDB EntryWEB
www.vupen.com/english/advisories/2008/1981/referencesVDB EntryX Refsource VUPENURL RepurposedWEB
www-1.ibm.com/support/docview.wss?uid=swg1IZ20133Vendor AdvisoryX Refsource AIXAPARThird Party AdvisoryWEB

Show all 64 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11177VDB EntrySignatureX Refsource OVALTool SignatureWEB
secunia.com/advisories/28915Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
secunia.com/advisories/37460Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
www-1.ibm.com/support/docview.wss?uid=swg1IZ20991Vendor AdvisoryX Refsource AIXAPARThird Party AdvisoryWEB
www.securityfocus.com/bid/31681VDB EntryX Refsource BIDThird Party AdvisoryWEB
secunia.com/advisories/28884Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
www.vmware.com/security/advisories/VMSA-2009-0016.htmlX Refsource CONFIRMThird Party AdvisoryWEB
www.securityfocus.com/archive/1/487822/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB EntryWEB
www-01.ibm.com/support/docview.wss?uid=swg27012048X Refsource CONFIRMThird Party AdvisoryWEB
secunia.com/advisories/28878Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
secunia.com/advisories/32036Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
www.vupen.com/english/advisories/2008/0488VDB EntryX Refsource VUPENURL RepurposedWEB
secunia.com/advisories/44183Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
lists.apple.com/archives/security-announce/2008//Jun/msg00002.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party AdvisoryWEB
www.mandriva.com/security/advisories?name=MDVSA-2010:176Vendor AdvisoryX Refsource MANDRIVAThird Party AdvisoryWEB
www.securityfocus.com/archive/1/507985/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB EntryWEB
lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
www.mandriva.com/security/advisories?name=MDVSA-2009:018Vendor AdvisoryX Refsource MANDRIVAThird Party AdvisoryWEB
www.redhat.com/docs/…X Refsource CONFIRMThird Party AdvisoryWEB
tomcat.apache.org/security-6.htmlX Refsource CONFIRMVendor AdvisoryWEB
secunia.com/advisories/57126Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
secunia.com/advisories/32222Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
secunia.com/advisories/30802Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
www-01.ibm.com/support/docview.wss?uid=swg27012047X Refsource CONFIRMThird Party AdvisoryWEB
www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.htmlVendor AdvisoryX Refsource FEDORAThird Party AdvisoryWEB
security.gentoo.org/glsa/glsa-200804-10.xmlVendor AdvisoryX Refsource GENTOOBroken LinkWEB
www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.htmlVendor AdvisoryX Refsource FEDORAThird Party AdvisoryWEB
www.vupen.com/english/advisories/2008/1856/referencesVDB EntryX Refsource VUPENURL RepurposedWEB
www.vmware.com/security/advisories/VMSA-2008-0010.htmlX Refsource CONFIRMThird Party AdvisoryWEB
tomcat.apache.org/security-5.htmlX Refsource CONFIRMVendor AdvisoryWEB
www.vupen.com/english/advisories/2008/2780VDB EntryX Refsource VUPENURL RepurposedWEB
marc.info?l=bugtraq&m=139344343412337&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party AdvisoryWEB
lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party AdvisoryWEB
support.apple.com/kb/HT3216X Refsource CONFIRMThird Party AdvisoryWEB
www-01.ibm.com/support/docview.wss?uid=swg24018932X Refsource CONFIRMThird Party AdvisoryWEB
secunia.com/advisories/29711Third Party AdvisoryX Refsource SECUNIABroken LinkWEB
www.vupen.com/english/advisories/2009/3316VDB EntryX Refsource VUPENURL RepurposedWEB
bugzilla.redhat.com/show_bug.cgi?id=532111X Refsource CONFIRMIssue TrackingThird Party AdvisoryWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
nvd.nist.gov/vuln/detail/CVE-2007-5333Advisory
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
github.com/apache/tomcatPACKAGE