Information Exposure Affecting org.apache.tomcat:catalina package, versions [6.0.0, 6.0.27)
Snyk CVSS
Attack Complexity
High
Threat Intelligence
Exploit Maturity
Mature
EPSS
15.39% (96th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-ORGAPACHETOMCAT-30826
- published 11 Feb 2015
- disclosed 23 Apr 2010
- credit Unknown
Introduced: 23 Apr 2010
CVE-2010-1157 Open this link in a new tabOverview
It might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.