CVE-2008-0002

Aliases:GHSA-5x5f-9r6q-q7mh
Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 12 Feb 2008, 00:00
Last modified:07 Aug 2024, 07:32

Vulnerability Summary

Overall Risk (default)
low
24/100
CVSS Score
5.8 MEDIUM
v2.0 (nvd)
EPSS Score
4.36% LOW
4% probability +0.26%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Feb 2008, 00:00
Published
Vulnerability first disclosed
07 Aug 2024, 07:32
Last Modified
Vulnerability information updated

Description

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

CVSS Metrics

  • v2.0•MEDIUM•Score: 5.8AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS Trends

Current EPSS score: 4.36%• Percentile: 89%

Affected Systems

  • Unknown•Tomcat

    6.0.5 | 6.0.6 | 6.0.7 | 6.0.8 | 6.0.9 | 6.0.10 | 6.0.11 | 6.0.12 | 6.0.13 | 6.0.14 | 6.0.15

  • org.apache.tomcat•tomcat

    ≥ 6.0.0, < 6.0.16

References (36)