Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat jsp应用服务器程序头信息泄露漏洞
Vulnerability Description
Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 如果恶意客户端向Apache Tomcat服务器的mod_jk模块提交了Content-Length头为空的恶意请求，或在短时间内反复提交相同的请求的话，就可以查看其他用户请求相关的响应。
CVSS Information
N/A
Vulnerability Type
N/A