CVE-2011-3375: Infoleak
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3375?
CVE-2011-3375 has a medium severity rating as it allows unintended read access to sensitive information in specific circumstances.
How do I fix CVE-2011-3375?
To fix CVE-2011-3375, upgrade to Apache Tomcat version 6.0.35 or 7.0.22 or later.
What versions of Apache Tomcat are affected by CVE-2011-3375?
CVE-2011-3375 affects Apache Tomcat versions 6.0.30 to 6.0.33 and all 7.x versions prior to 7.0.22.
Can CVE-2011-3375 be exploited remotely?
Yes, CVE-2011-3375 can be exploited by remote attackers to gain access to sensitive information.
What kind of information can be accessed due to CVE-2011-3375?
CVE-2011-3375 may allow attackers to read access to IP address and HTTP header information.