Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-2071

java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.

CVSS v2:

  • Severity: Low
  • Score: 2.6
  • AV:N/AC:H/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
apache / tomcat 7.0.2-beta 7.0.2-beta.x
apache / tomcat 7.0.12 7.0.12.x
apache / tomcat 7.0.20 7.0.20.x
apache / tomcat 7.0.8 7.0.8.x
apache / tomcat 7.0.1 7.0.1.x
apache / tomcat 7.0.2 7.0.2.x
apache / tomcat 7.0.5 7.0.5.x
apache / tomcat 7.0.4-beta 7.0.4-beta.x
apache / tomcat 7.0.22 7.0.22.x
apache / tomcat 7.0.28 7.0.28.x
apache / tomcat 7.0.0 7.0.0.x
apache / tomcat 7.0.6 7.0.6.x
apache / tomcat 7.0.18 7.0.18.x
apache / tomcat 7.0.14 7.0.14.x
apache / tomcat 7.0.11 7.0.11.x
apache / tomcat 7.0.23 7.0.23.x
apache / tomcat 7.0.0-beta 7.0.0-beta.x
apache / tomcat 7.0.7 7.0.7.x
apache / tomcat 7.0.13 7.0.13.x
apache / tomcat 7.0.30 7.0.30.x
apache / tomcat 7.0.15 7.0.15.x
apache / tomcat 7.0.19 7.0.19.x
apache / tomcat 7.0.16 7.0.16.x
apache / tomcat 7.0.10 7.0.10.x
apache / tomcat 7.0.25 7.0.25.x
apache / tomcat 7.0.32 7.0.32.x
apache / tomcat 7.0.21 7.0.21.x
apache / tomcat 7.0.17 7.0.17.x
apache / tomcat 7.0.9 7.0.9.x
apache / tomcat 7.0.4 7.0.4.x
apache / tomcat 7.0.3 7.0.3.x
org.apache.tomcat / tomcat 7.0.0 7.0.40