正文

Apache Tomcat 环境问题漏洞

admin
admin V管理员 /0 评论 /13 阅读
0306
此篇文章发布距今已超过1155天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Apache Tomcat 环境问题漏洞

  • CNNVD编号：CNNVD-202107-681
    • <!--
  • 危害等级： 中危-->
  • 危害等级： 中危
  • CVE编号： CVE-2021-33037
  • 漏洞类型： 环境问题
  • 发布时间： 2021-07-12
  • 威胁类型： 远程
  • 更新时间： 2021-12-01
  • 厂        商：
  • 漏洞来源：

漏洞简介

Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。

Apache Tomcat存在环境问题漏洞，该漏洞源于Apache Tomcat 在某些情况下没有正确解析 HTTP 传输编码请求标头，导致在与反向代理一起使用时可能会请求走私。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://lists.apache.org/thread.html/r612a79269b0d5e5780c62dfd34286a8037232fec0bc6f1a7e60c9381%40%3Cannounce.tomcat.apache.org%3E

参考网址

来源:MLIST

链接:https://lists.apache.org/thread.html/r40f921575aee8d7d34e53182f862c45cbb8f3d898c9d4e865c2ec262@%3Ccommits.tomee.apache.org%3E

来源:CONFIRM

链接:https://kc.mcafee.com/corporate/index?page=content&id=SB10366

来源:MLIST

链接:https://lists.apache.org/thread.html/rd0dfea39829bc0606c936a16f6fca338127c86c0a1083970b45ac8d2@%3Ccommits.tomee.apache.org%3E

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2021/08/msg00009.html

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210827-0007/

来源:MLIST

链接:https://lists.apache.org/thread.html/rf1b54fd3f52f998ca4829159a88cc4c23d6cef5c6447d00948e75c97@%3Ccommits.tomee.apache.org%3E

来源:N/A

链接:https://www.oracle.com//security-alerts/cpujul2021.html

来源:MLIST

链接:https://lists.apache.org/thread.html/rc6ef52453bb996a98cb45442871a1db56b7c349939e45d829bf9ae37@%3Ccommits.tomee.apache.org%3E

来源:DEBIAN

链接:https://www.debian.org/security/2021/dsa-4952

来源:MLIST

链接:https://lists.apache.org/thread.html/r290aee55b72811fd19e75ac80f6143716c079170c5671b96932ed44b@%3Ccommits.tomee.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/re01e7e93154e8bdf78a11a23f9686427bd3d51fc6e12c508645567b7@%3Ccommits.tomee.apache.org%3E

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuoct2021.html

来源:MISC

链接:https://lists.apache.org/thread.html/r612a79269b0d5e5780c62dfd34286a8037232fec0bc6f1a7e60c9381%40%3Cannounce.tomcat.apache.org%3E

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021113014

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpuoct2021.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2647

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3924

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2359

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-33037

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Apache-Tomcat-hiding-via-request-encoding-35862

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021080808

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021101943

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.4028

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2676

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021090824

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3688

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2664

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/6493299

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/6497115

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-33037

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3531

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/6485649

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021092919

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021072907

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021081231

受影响实体

    暂无


补丁

  • Apache Tomcat 环境问题漏洞的修复措施
    <!--
    2021-7-12
    -->