CVE-2008-0128
First published: Wed Jan 23 2008(Updated: )
The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tomcat | <=5.5.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://issues.apache.org/bugzilla/show_bug.cgi?id=41217
- http://security-tracker.debian.net/tracker/CVE-2008-0128
- http://www.debian.org/security/2008/dsa-1468
- http://www.securityfocus.com/bid/27365
- http://secunia.com/advisories/28549
- http://secunia.com/advisories/28552
- http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
- http://secunia.com/advisories/29242
- http://www.redhat.com/support/errata/RHSA-2008-0261.html
- http://rhn.redhat.com/errata/RHSA-2008-0630.html
- http://secunia.com/advisories/31493
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
- http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540
- http://secunia.com/advisories/33668
- http://www.vupen.com/english/advisories/2009/0233
- http://www.vupen.com/english/advisories/2008/0192
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39804
- http://www.securityfocus.com/archive/1/500412/100/0/threaded
- http://www.securityfocus.com/archive/1/500396/100/0/threaded
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
Frequently Asked Questions
What is the severity of CVE-2008-0128?
CVE-2008-0128 is considered a medium severity vulnerability due to the potential for cookie interception.
How do I fix CVE-2008-0128?
To fix CVE-2008-0128, upgrade Apache Tomcat to version 5.5.21 or later where the issue is resolved.
What impact does CVE-2008-0128 have on web applications?
CVE-2008-0128 can expose applications to session hijacking if the JSESSIONIDSSO cookie is transmitted over insecure HTTP.
Is CVE-2008-0128 present in all versions of Apache Tomcat?
CVE-2008-0128 affects all versions of Apache Tomcat before 5.5.21.
How does CVE-2008-0128 affect the secure flag of cookies?
CVE-2008-0128 fails to set the secure flag on the JSESSIONIDSSO cookie in HTTPS sessions, allowing it to be sent over HTTP.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/severity
- agent/references
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/author
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-historical
- vendor/apache
- canonical/tomcat
- version/tomcat/5.5.20