CVE-2017-7675
11.08.2017, 02:29
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.
| Vendor | Product | Version |
|---|---|---|
| apache | tomcat | 8.5.0 |
| apache | tomcat | 8.5.1 |
| apache | tomcat | 8.5.2 |
| apache | tomcat | 8.5.3 |
| apache | tomcat | 8.5.4 |
| apache | tomcat | 8.5.5 |
| apache | tomcat | 8.5.6 |
| apache | tomcat | 8.5.7 |
| apache | tomcat | 8.5.8 |
| apache | tomcat | 8.5.9 |
| apache | tomcat | 8.5.10 |
| apache | tomcat | 8.5.11 |
| apache | tomcat | 8.5.12 |
| apache | tomcat | 8.5.13 |
| apache | tomcat | 8.5.14 |
| apache | tomcat | 8.5.15 |
| apache | tomcat | 9.0.0:milestone1 |
| apache | tomcat | 9.0.0:milestone10 |
| apache | tomcat | 9.0.0:milestone11 |
| apache | tomcat | 9.0.0:milestone12 |
| apache | tomcat | 9.0.0:milestone13 |
| apache | tomcat | 9.0.0:milestone14 |
| apache | tomcat | 9.0.0:milestone15 |
| apache | tomcat | 9.0.0:milestone16 |
| apache | tomcat | 9.0.0:milestone17 |
| apache | tomcat | 9.0.0:milestone18 |
| apache | tomcat | 9.0.0:milestone19 |
| apache | tomcat | 9.0.0:milestone2 |
| apache | tomcat | 9.0.0:milestone20 |
| apache | tomcat | 9.0.0:milestone21 |
| apache | tomcat | 9.0.0:milestone3 |
| apache | tomcat | 9.0.0:milestone4 |
| apache | tomcat | 9.0.0:milestone5 |
| apache | tomcat | 9.0.0:milestone6 |
| apache | tomcat | 9.0.0:milestone7 |
| apache | tomcat | 9.0.0:milestone8 |
| apache | tomcat | 9.0.0:milestone9 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References