Published: 11/08/2017 Updated: 08/12/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache tomcat 8.0.4
apache tomcat 8.0.10
apache tomcat 7.0.49
apache tomcat 8.0.30
apache tomcat 8.0.44
apache tomcat 7.0.62
apache tomcat 8.0.17
apache tomcat 7.0.53
apache tomcat 8.0.7
apache tomcat 8.0.26
apache tomcat 7.0.58
apache tomcat 7.0.78
apache tomcat 8.5.2
apache tomcat 7.0.55
apache tomcat 8.5.9
apache tomcat 8.5.4
apache tomcat 8.0.40
apache tomcat 8.0.2
apache tomcat 7.0.63
apache tomcat 8.0.20
apache tomcat 8.0.31
apache tomcat 8.5.0
apache tomcat 7.0.46
apache tomcat 7.0.72
apache tomcat 8.0.5
apache tomcat 7.0.76
apache tomcat 7.0.71
apache tomcat 8.0.1
apache tomcat 8.0.0
apache tomcat 7.0.59
apache tomcat 8.5.15
apache tomcat 7.0.65
apache tomcat 8.0.19
apache tomcat 7.0.50
apache tomcat 8.5.10
apache tomcat 8.0
apache tomcat 8.0.39
apache tomcat 8.0.12
apache tomcat 8.0.27
apache tomcat 8.0.15
apache tomcat 7.0.48
apache tomcat 7.0.67
apache tomcat 7.0.74
apache tomcat 7.0.66
apache tomcat 8.5.13
apache tomcat 8.0.22
apache tomcat 7.0.44
apache tomcat 8.5.14
apache tomcat 7.0.69
apache tomcat 8.0.29
apache tomcat 8.0.42
apache tomcat 7.0.52
apache tomcat 7.0.42
apache tomcat 7.0.60
apache tomcat 7.0.45
apache tomcat 8.0.11
apache tomcat 8.0.24
apache tomcat 8.0.36
apache tomcat 7.0.68
apache tomcat 8.5.5
apache tomcat 8.0.23
apache tomcat 8.5.3
apache tomcat 8.0.33
apache tomcat 7.0.47
apache tomcat 8.5.6
apache tomcat 8.0.6
apache tomcat 8.0.21
apache tomcat 8.0.32
apache tomcat 7.0.41
apache tomcat 7.0.75
apache tomcat 8.0.41
apache tomcat 8.0.25
apache tomcat 8.0.18
apache tomcat 7.0.54
apache tomcat 8.0.35
apache tomcat 7.0.61
apache tomcat 8.0.3
apache tomcat 8.0.38
apache tomcat 7.0.57
apache tomcat 7.0.43
apache tomcat 8.0.13
apache tomcat 8.0.14
apache tomcat 8.0.9
apache tomcat 8.0.43
apache tomcat 8.5.7
apache tomcat 8.5.8
apache tomcat 8.0.16
apache tomcat 8.5.12
apache tomcat 8.0.8
apache tomcat 7.0.77
apache tomcat 7.0.56
apache tomcat 8.0.34
apache tomcat 8.5.11
apache tomcat 8.0.28
apache tomcat 7.0.64
apache tomcat 8.0.37
apache tomcat 7.0.70
apache tomcat 8.5.1
apache tomcat 7.0.73
apache tomcat 9.0.0

Several security issues were fixed in Tomcat ...

Debian Bug report logs - #898935 tomcat8: CVE-2018-8014: The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' Package: src:tomcat8; Maintainer for src:tomcat8 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccors ...

Two issues were discovered in the Tomcat servlet and JSP engine CVE-2017-7674 Rick Riemer discovered that the Cross-Origin Resource Sharing filter did not add a Vary header indicating possible different responses, which could lead to cache poisoning CVE-2017-7675 (stretch only) Markus Dörschmidt found that the HTTP/2 implementat ...

Synopsis Important: tomcat security update Type/Severity Security Advisory: Important Topic An update for tomcat is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, w ...

Synopsis Important: Red Hat JBoss Web Server 310 Service Pack 1 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Web Server 31 for RHEL 6 and Red Hat JBoss Web Server 31 for RHEL 7Red Hat Product Security has rated this update as having a sec ...

Synopsis Important: Red Hat JBoss Web Server Service Pack 1 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Web Server 31Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...

A vulnerability was discovered in Tomcat where the CORS Filter did not send a "Vary: Origin" HTTP header This potentially allowed sensitive data to be leaked to other visitors through both client-side and server-side caches ...

1480618: Vary header not added by CORS filter leading to cache poisoning The CORS Filter in Apache Tomcat did not add an HTTP Vary header indicating that the response varies depending on Origin This permitted client and server side cache poisoning in some circumstances (CVE-2017-7674) ...

Security constrained bypass in error page mechanism:While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 900M1 to 900M17, 850 to 8511, 800RC1 to 8041, and 700 to 7075 did not use the appropriate facade object When running an untrusted application under a SecurityManager, it was ...

Security constrained bypass in error page mechanism:A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page (CVE-2017-5664) The CORS Filter in Apache Tomcat 900M1 to 90 ...

Get Started

CVE-2017-7674

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect