[SECURITY] CVE-2017-7674 Apache Tomcat Cache Poisoning

2017-08-10 Thread Mark Thomas
CVE-2017-7674 Apache Tomcat Cache Poisoning Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M21 Apache Tomcat 8.5.0 to 8.5.15 Apache Tomcat 8.0.0.RC1 to 8.0.44 Apache Tomcat 7.0.41 to 7.0.78 Description: The CORS Filter did not an HTT

[SECURITY] CVE-2017-7675 Apache Tomcat Security Constraint Bypass

2017-08-10 Thread Mark Thomas
CVE-2017-7675 Apache Tomcat Cache Poisoning Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M21 Apache Tomcat 8.5.0 to 8.5.15 Description: The HTTP/2 implementation bypassed a number of security checks that prevented directory traver

[UPDATE][SECURITY] CVE-2017-7675 Apache Tomcat Security Constraint Bypass

2017-08-10 Thread Mark Thomas
CVE-2017-7675 Apache Tomcat Security Constraint Bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M21 Apache Tomcat 8.5.0 to 8.5.15 Description: The HTTP/2 implementation bypassed a number of security checks that prevented direc