Summary
The host is running Apache Tomcat Server and is prone to information disclosure vulnerability.
Impact
Successful exploitation will allow remote attackers to obtain potentially sensitive information.
Impact Level: Application
Solution
Apply patch or upgrade Apache Tomcat to 7.0.40 or later, For updates refer to http://tomcat.apache.org
*****
NOTE: Ignore this warning, if above mentioned patch is manually applied.
*****
Insight
Flaw due to improper handling of throwing a RunTimeException in an AsyncListener in 'java/org/apache/catalina/core/AsyncContextImpl.java'.
Affected
Apache Tomcat version 7.x to 7.0.39
References
Severity
Classification
-
CVE CVE-2013-2071 -
CVSS Base Score: 2.6
AV:N/AC:H/Au:N/C:P/I:N/A:N
Related Vulnerabilities