subject:"\[SECURITY\] CVE\-2017\-7675 Apache Tomcat Security Constraint Bypass"

[UPDATE][SECURITY] CVE-2017-7675 Apache Tomcat Security Constraint Bypass

2017-08-10 Thread Mark Thomas

CVE-2017-7675 Apache Tomcat Security Constraint Bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M21 Apache Tomcat 8.5.0 to 8.5.15 Description: The HTTP/2 implementation bypassed a number of security checks that prevented

[SECURITY] CVE-2017-7675 Apache Tomcat Security Constraint Bypass

2017-08-10 Thread Mark Thomas

CVE-2017-7675 Apache Tomcat Cache Poisoning Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M21 Apache Tomcat 8.5.0 to 8.5.15 Description: The HTTP/2 implementation bypassed a number of security checks that prevented directory