CVE-2011-3190: High severity tomcat vulnerability
Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3190?
CVE-2011-3190 has been classified as a critical severity vulnerability due to potential unauthorized access to sensitive information.
How do I fix CVE-2011-3190?
To fix CVE-2011-3190, upgrade your Apache Tomcat version to 5.5.34, 6.0.34, or 7.0.21 or later.
What versions of Apache Tomcat are affected by CVE-2011-3190?
CVE-2011-3190 affects Apache Tomcat versions 5.5.0 through 5.5.33, 6.0.0 through 6.0.33, and 7.0.0 through 7.0.20.
What type of attack is possible due to CVE-2011-3190?
CVE-2011-3190 allows remote attackers to spoof AJP requests, bypass authentication, and potentially access sensitive information.
Is there a workaround for CVE-2011-3190?
While the best solution is to upgrade your Apache Tomcat, a temporary workaround involves restricting access to the AJP connectors.