2017-10-16 12:31:07 -04:00
{
2019-03-18 03:58:57 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "security@apache.org" ,
"ID" : "CVE-2016-8747" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Apache Tomcat" ,
"version" : {
"version_data" : [
{
"version_value" : "8.5.7 to 8.5.9"
} ,
{
"version_value" : "9.0.0.M11 to 9.0.0.M15"
}
]
}
}
]
} ,
"vendor_name" : "Apache Software Foundation"
}
]
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
2017-10-16 12:31:07 -04:00
{
2019-03-18 03:58:57 +00:00
"lang" : "eng" ,
"value" : "An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request."
2017-10-16 12:31:07 -04:00
}
2019-03-18 03:58:57 +00:00
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Information disclosure"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "https://security.netapp.com/advisory/ntap-20180614-0002/" ,
"refsource" : "CONFIRM" ,
"url" : "https://security.netapp.com/advisory/ntap-20180614-0002/"
} ,
{
"name" : "http://tomcat.apache.org/security-9.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://tomcat.apache.org/security-9.html"
} ,
{
"name" : "96895" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/96895"
} ,
{
"name" : "http://svn.apache.org/viewvc?view=revision&revision=1774161" ,
"refsource" : "CONFIRM" ,
"url" : "http://svn.apache.org/viewvc?view=revision&revision=1774161"
} ,
{
"name" : "http://tomcat.apache.org/security-8.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://tomcat.apache.org/security-8.html"
} ,
{
"name" : "http://svn.apache.org/viewvc?view=revision&revision=1774166" ,
"refsource" : "CONFIRM" ,
"url" : "http://svn.apache.org/viewvc?view=revision&revision=1774166"
2019-03-19 15:00:47 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/" ,
"url" : "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E"
2019-03-25 11:01:02 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/" ,
"url" : "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E"
2019-04-13 23:00:42 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/" ,
"url" : "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E"
2019-04-15 16:00:42 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/" ,
"url" : "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E"
2020-02-03 12:01:12 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/" ,
"url" : "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E"
2020-02-13 17:01:35 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/" ,
"url" : "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E"
2019-03-18 03:58:57 +00:00
}
]
}
}
