Description
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.
Remediation
References
Related Vulnerabilities
Apache Tomcat version older than 7.0.32
Moodle Improper Input Validation Vulnerability (CVE-2020-10738)
Internet Information Services Other Vulnerability (CVE-2002-1908)
PHP Numeric Errors Vulnerability (CVE-2013-4635)
SharePoint URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-1323)