Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat 信息泄露漏洞
Vulnerability Description
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。 Apache Tomcat 6.0.0版本至6.0.14版本、5.5.0版本至5.5.25版本、4.1.0版本至4.1.36版本存在信息泄露漏洞。攻击者利用该漏洞可以泄露敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A