Vulnerability in Apache Tomcat

CVE-2011-1088

Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.

EPSS: 0.065 (93.0th percentile) — read the EPSS interpretation.

Affected products

  • Apache Tomcat — versions 7.0.0, 7.0.1, 7.0.2
  • N/a — versions n/a

References