CVE-2011-1582: Medium severity tomcat vulnerability
Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1582?
CVE-2011-1582 is considered a medium severity vulnerability due to its potential for bypassing security constraints.
How do I fix CVE-2011-1582?
To fix CVE-2011-1582, upgrade Apache Tomcat to version 7.0.14 or later.
What versions of Apache Tomcat are affected by CVE-2011-1582?
CVE-2011-1582 affects Apache Tomcat versions 7.0.12 and 7.0.13.
What is the impact of CVE-2011-1582?
The impact of CVE-2011-1582 is that it allows remote attackers to bypass access restrictions on servlets.
Is CVE-2011-1582 a configuration issue?
Yes, CVE-2011-1582 involves a misconfiguration where the first request to a servlet is processed without adhering to security constraints.