Files
cve/2007/CVE-2007-3385.md
T
0xMarcio e9a692de92 Remove links to the retired CIS OVAL Repository
Thirty of thirty sampled returned 404: the service is gone, so all 942
links across 911 entries are permanently dead. 576 entries held nothing
else and drop out of the search index rather than offering a reader a
guaranteed miss.
2026-08-31 00:27:36 +02:00

807 B

CVE-2007-3385

Description

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

POC

Reference

Github

No PoCs found on GitHub currently.