Published: 08/04/2011 Updated: 19/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The HTTP BIO connector in Apache Tomcat 7.0.x prior to 7.0.12 does not properly handle HTTP pipelining, which allows remote malicious users to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache tomcat 7.0.10

apache tomcat 7.0.11

apache tomcat 7.0.5

apache tomcat 7.0.1

apache tomcat 7.0.7

apache tomcat 7.0.6

apache tomcat 7.0.0

apache tomcat 7.0.9

apache tomcat 7.0.8

apache tomcat 7.0.3

apache tomcat 7.0.2

apache tomcat 7.0.4

Github Repositories

Check with Maven on CVE-2011-1475

CVE-2011-1475 Check dependency vulnerabilities using Maven on CVE-2011-1475 This project is to test Maven with Travis CI