Show filters
42 Total Results
Displaying 41-42 of 42
Sort by:
Attacker Value
Unknown
CVE-2011-1088
Disclosure Date: March 14, 2011 (last updated October 04, 2023)
Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
0
Attacker Value
Unknown
CVE-2011-1419
Disclosure Date: March 14, 2011 (last updated October 04, 2023)
Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088.
0
