Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat Authentication Header Realm Name信息泄露漏洞
Vulnerability Description
Apache Tomcat是一款由Apache Foundation维护的免费开放源代码的Web服务器程序。 BASIC和DIGEST认证的WWW-Authenticate头包含有区域名。如果web.xml中对应用指定了<realm-name>元素，就会使用指定的区域名，否则Tomcat就会使用以下代码段生成一个区域名：request.getServerName() + : + request.getServerPort() 在某些环境中这可能会暴露运行Tomcat机器的本地主机名或IP地址。
CVSS Information
N/A
Vulnerability Type
N/A