CVE-2011-1088: Medium severity tomcat vulnerability
Published Mar 14, 2011
·Updated
Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
Affected Software
12 affected componentsFixes available
maven/org.apache.tomcat:tomcat>=7.0.0<7.0.10
7.0.10
Apache Tomcat=7.0.0
Apache Tomcat=7.0.0-beta
Apache Tomcat=7.0.1
Apache Tomcat=7.0.2
Apache Tomcat=7.0.3
Apache Tomcat=7.0.4
Apache Tomcat=7.0.5
Apache Tomcat=7.0.6
Apache Tomcat=7.0.7
Apache Tomcat=7.0.8
Apache Tomcat=7.0.9
Remediation
Patch Available
Event History
Mar 14, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 14, 2022
Advisory Published
via GitHub·02:56 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-1088?
CVE-2011-1088 is considered a medium severity vulnerability due to its potential to allow unauthorized access to web applications.
2
How do I fix CVE-2011-1088?
To fix CVE-2011-1088, upgrade Apache Tomcat to version 7.0.10 or later.
3
What versions of Apache Tomcat are affected by CVE-2011-1088?
CVE-2011-1088 affects Apache Tomcat versions 7.0.0 through 7.0.9.
4
What is the nature of the vulnerability in CVE-2011-1088?
CVE-2011-1088 allows remote attackers to bypass intended access restrictions through flawed handling of ServletSecurity annotations.
5
Is CVE-2011-1088 a web application vulnerability?
Yes, CVE-2011-1088 specifically targets web applications hosted on affected versions of Apache Tomcat.