Information Exposure Affecting org.apache.tomcat:catalina Open this link in a new tab package, versions [6.0.0, 6.0.27)
Exploit Maturity
Mature
Attack Complexity
High
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications-
snyk-id
SNYK-JAVA-ORGAPACHETOMCAT-30826
-
published
11 Feb 2015
-
disclosed
23 Apr 2010
-
credit
Unknown
Introduced: 23 Apr 2010
CVE-2010-1157 Open this link in a new tabOverview
It might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.