Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat 安全漏洞
Vulnerability Description
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。 Apache Tomcat 7.0.11版本存在安全漏洞，该漏洞源于没有遵循安全约束。远程攻击者可以借助对元数据完整的web应用程序的HTTP请求，绕过预设的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A