CVE-2008-5519

mod_jk: session information leak

Severity Score

2.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.

El conector JK (tambien conocido como mod_jk) v1.2.0 hasta la v1.2.26 en Apache Tomcat permite a atacantes remotos obtener información sensible a través de una petición arbitraria desde un cliente HTTP, en circunstancias oportunas implicando (1) una petición desde distintos clientes que incluyan una cabecera con el campo longitud de contenido, pero sin datos en POST, o (2) una serie de peticiones rápidas, relativo a la no conformidad con los requerimientos del protocolo AJP para peticiones que contengan cabeceras con el campo longitud del contenido.

*Credits: N/A

CVSS Scores

NISTv2 2.6

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-12-12 CVE Reserved
2009-04-07 CVE Published
2023-12-29 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (27)

URL	Tag	Source
http://mail-archives.apache.org/mod_mbox/www-announce/200904.mbox/%3C49DBBAC0.2080400%40apache.org%3E	Mailing List
http://marc.info/?l=tomcat-dev&m=123913700700879	Mailing List
http://secunia.com/advisories/29283	Third Party Advisory
http://secunia.com/advisories/35537	Third Party Advisory
http://securitytracker.com/id?1022001	Vdb Entry
http://www.openwall.com/lists/oss-security/2009/04/08/10	Mailing List
http://www.securityfocus.com/archive/1/502530/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/34412	Vdb Entry
http://www.vupen.com/english/advisories/2009/0973	Vdb Entry
https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E	Mailing List

URL	Date	SRC
http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/xdocs/miscellaneous/changelog.xml?view=markup&pathrev=702540	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	2023-02-13
http://secunia.com/advisories/34621	2023-02-13
http://sunsolve.sun.com/search/document.do?assetkey=1-26-262468-1	2023-02-13
http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/native/common/jk_ajp_common.c?r1=702387&r2=702540&pathrev=702540&diff_format=h	2023-02-13
http://svn.eu.apache.org/viewvc?view=rev&revision=702540	2023-02-13
http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html	2023-02-13
http://tomcat.apache.org/security-jk.html	2023-02-13
http://www.debian.org/security/2009/dsa-1810	2023-02-13
http://www.redhat.com/support/errata/RHSA-2009-0446.html	2023-02-13
https://bugzilla.redhat.com/show_bug.cgi?id=490201	2009-11-30
https://access.redhat.com/security/cve/CVE-2008-5519	2009-11-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2 Search vendor "Apache" for product "Mod Jk" and version "1.2"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.1 Search vendor "Apache" for product "Mod Jk" and version "1.2.1"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.6 Search vendor "Apache" for product "Mod Jk" and version "1.2.6"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.7 Search vendor "Apache" for product "Mod Jk" and version "1.2.7"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.8 Search vendor "Apache" for product "Mod Jk" and version "1.2.8"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.9 Search vendor "Apache" for product "Mod Jk" and version "1.2.9"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.10 Search vendor "Apache" for product "Mod Jk" and version "1.2.10"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.11 Search vendor "Apache" for product "Mod Jk" and version "1.2.11"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.12 Search vendor "Apache" for product "Mod Jk" and version "1.2.12"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.13 Search vendor "Apache" for product "Mod Jk" and version "1.2.13"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.14 Search vendor "Apache" for product "Mod Jk" and version "1.2.14"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.14.1 Search vendor "Apache" for product "Mod Jk" and version "1.2.14.1"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.15 Search vendor "Apache" for product "Mod Jk" and version "1.2.15"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.16 Search vendor "Apache" for product "Mod Jk" and version "1.2.16"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.17 Search vendor "Apache" for product "Mod Jk" and version "1.2.17"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.18 Search vendor "Apache" for product "Mod Jk" and version "1.2.18"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.19 Search vendor "Apache" for product "Mod Jk" and version "1.2.19"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.20 Search vendor "Apache" for product "Mod Jk" and version "1.2.20"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.21 Search vendor "Apache" for product "Mod Jk" and version "1.2.21"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.22 Search vendor "Apache" for product "Mod Jk" and version "1.2.22"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.23 Search vendor "Apache" for product "Mod Jk" and version "1.2.23"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.24 Search vendor "Apache" for product "Mod Jk" and version "1.2.24"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.25 Search vendor "Apache" for product "Mod Jk" and version "1.2.25"		-		Affected
Apache Search vendor "Apache"		Mod Jk Search vendor "Apache" for product "Mod Jk"				1.2.26 Search vendor "Apache" for product "Mod Jk" and version "1.2.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.0.0 Search vendor "Apache" for product "Tomcat" and version "4.0.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.0.1 Search vendor "Apache" for product "Tomcat" and version "4.0.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.0.2 Search vendor "Apache" for product "Tomcat" and version "4.0.2"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.0.3 Search vendor "Apache" for product "Tomcat" and version "4.0.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.0.4 Search vendor "Apache" for product "Tomcat" and version "4.0.4"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.0.5 Search vendor "Apache" for product "Tomcat" and version "4.0.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.0.6 Search vendor "Apache" for product "Tomcat" and version "4.0.6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.0 Search vendor "Apache" for product "Tomcat" and version "4.1.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.1 Search vendor "Apache" for product "Tomcat" and version "4.1.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.2 Search vendor "Apache" for product "Tomcat" and version "4.1.2"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.3 Search vendor "Apache" for product "Tomcat" and version "4.1.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.3 Search vendor "Apache" for product "Tomcat" and version "4.1.3"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.4 Search vendor "Apache" for product "Tomcat" and version "4.1.4"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.5 Search vendor "Apache" for product "Tomcat" and version "4.1.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.6 Search vendor "Apache" for product "Tomcat" and version "4.1.6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.7 Search vendor "Apache" for product "Tomcat" and version "4.1.7"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.8 Search vendor "Apache" for product "Tomcat" and version "4.1.8"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.9 Search vendor "Apache" for product "Tomcat" and version "4.1.9"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.9 Search vendor "Apache" for product "Tomcat" and version "4.1.9"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.10 Search vendor "Apache" for product "Tomcat" and version "4.1.10"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.11 Search vendor "Apache" for product "Tomcat" and version "4.1.11"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.12 Search vendor "Apache" for product "Tomcat" and version "4.1.12"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.13 Search vendor "Apache" for product "Tomcat" and version "4.1.13"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.14 Search vendor "Apache" for product "Tomcat" and version "4.1.14"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.15 Search vendor "Apache" for product "Tomcat" and version "4.1.15"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.16 Search vendor "Apache" for product "Tomcat" and version "4.1.16"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.17 Search vendor "Apache" for product "Tomcat" and version "4.1.17"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.18 Search vendor "Apache" for product "Tomcat" and version "4.1.18"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.19 Search vendor "Apache" for product "Tomcat" and version "4.1.19"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.20 Search vendor "Apache" for product "Tomcat" and version "4.1.20"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.21 Search vendor "Apache" for product "Tomcat" and version "4.1.21"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.22 Search vendor "Apache" for product "Tomcat" and version "4.1.22"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.23 Search vendor "Apache" for product "Tomcat" and version "4.1.23"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.24 Search vendor "Apache" for product "Tomcat" and version "4.1.24"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.25 Search vendor "Apache" for product "Tomcat" and version "4.1.25"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.26 Search vendor "Apache" for product "Tomcat" and version "4.1.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.27 Search vendor "Apache" for product "Tomcat" and version "4.1.27"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.28 Search vendor "Apache" for product "Tomcat" and version "4.1.28"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.29 Search vendor "Apache" for product "Tomcat" and version "4.1.29"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.30 Search vendor "Apache" for product "Tomcat" and version "4.1.30"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.31 Search vendor "Apache" for product "Tomcat" and version "4.1.31"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.32 Search vendor "Apache" for product "Tomcat" and version "4.1.32"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.33 Search vendor "Apache" for product "Tomcat" and version "4.1.33"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.34 Search vendor "Apache" for product "Tomcat" and version "4.1.34"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.35 Search vendor "Apache" for product "Tomcat" and version "4.1.35"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				4.1.36 Search vendor "Apache" for product "Tomcat" and version "4.1.36"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.0 Search vendor "Apache" for product "Tomcat" and version "5.0.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.1 Search vendor "Apache" for product "Tomcat" and version "5.0.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.2 Search vendor "Apache" for product "Tomcat" and version "5.0.2"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.3 Search vendor "Apache" for product "Tomcat" and version "5.0.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.4 Search vendor "Apache" for product "Tomcat" and version "5.0.4"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.5 Search vendor "Apache" for product "Tomcat" and version "5.0.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.6 Search vendor "Apache" for product "Tomcat" and version "5.0.6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.7 Search vendor "Apache" for product "Tomcat" and version "5.0.7"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.8 Search vendor "Apache" for product "Tomcat" and version "5.0.8"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.9 Search vendor "Apache" for product "Tomcat" and version "5.0.9"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.10 Search vendor "Apache" for product "Tomcat" and version "5.0.10"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.11 Search vendor "Apache" for product "Tomcat" and version "5.0.11"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.12 Search vendor "Apache" for product "Tomcat" and version "5.0.12"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.13 Search vendor "Apache" for product "Tomcat" and version "5.0.13"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.14 Search vendor "Apache" for product "Tomcat" and version "5.0.14"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.15 Search vendor "Apache" for product "Tomcat" and version "5.0.15"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.16 Search vendor "Apache" for product "Tomcat" and version "5.0.16"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.17 Search vendor "Apache" for product "Tomcat" and version "5.0.17"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.18 Search vendor "Apache" for product "Tomcat" and version "5.0.18"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.19 Search vendor "Apache" for product "Tomcat" and version "5.0.19"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.21 Search vendor "Apache" for product "Tomcat" and version "5.0.21"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.22 Search vendor "Apache" for product "Tomcat" and version "5.0.22"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.23 Search vendor "Apache" for product "Tomcat" and version "5.0.23"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.24 Search vendor "Apache" for product "Tomcat" and version "5.0.24"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.25 Search vendor "Apache" for product "Tomcat" and version "5.0.25"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.26 Search vendor "Apache" for product "Tomcat" and version "5.0.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.27 Search vendor "Apache" for product "Tomcat" and version "5.0.27"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.28 Search vendor "Apache" for product "Tomcat" and version "5.0.28"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.29 Search vendor "Apache" for product "Tomcat" and version "5.0.29"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.0.30 Search vendor "Apache" for product "Tomcat" and version "5.0.30"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.0 Search vendor "Apache" for product "Tomcat" and version "5.5.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.1 Search vendor "Apache" for product "Tomcat" and version "5.5.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.2 Search vendor "Apache" for product "Tomcat" and version "5.5.2"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.3 Search vendor "Apache" for product "Tomcat" and version "5.5.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.4 Search vendor "Apache" for product "Tomcat" and version "5.5.4"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.5 Search vendor "Apache" for product "Tomcat" and version "5.5.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.6 Search vendor "Apache" for product "Tomcat" and version "5.5.6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.7 Search vendor "Apache" for product "Tomcat" and version "5.5.7"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.8 Search vendor "Apache" for product "Tomcat" and version "5.5.8"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.9 Search vendor "Apache" for product "Tomcat" and version "5.5.9"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.10 Search vendor "Apache" for product "Tomcat" and version "5.5.10"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.11 Search vendor "Apache" for product "Tomcat" and version "5.5.11"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.12 Search vendor "Apache" for product "Tomcat" and version "5.5.12"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.13 Search vendor "Apache" for product "Tomcat" and version "5.5.13"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.14 Search vendor "Apache" for product "Tomcat" and version "5.5.14"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.15 Search vendor "Apache" for product "Tomcat" and version "5.5.15"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.16 Search vendor "Apache" for product "Tomcat" and version "5.5.16"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.17 Search vendor "Apache" for product "Tomcat" and version "5.5.17"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.18 Search vendor "Apache" for product "Tomcat" and version "5.5.18"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.19 Search vendor "Apache" for product "Tomcat" and version "5.5.19"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.20 Search vendor "Apache" for product "Tomcat" and version "5.5.20"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.21 Search vendor "Apache" for product "Tomcat" and version "5.5.21"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.22 Search vendor "Apache" for product "Tomcat" and version "5.5.22"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.23 Search vendor "Apache" for product "Tomcat" and version "5.5.23"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.24 Search vendor "Apache" for product "Tomcat" and version "5.5.24"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.25 Search vendor "Apache" for product "Tomcat" and version "5.5.25"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.26 Search vendor "Apache" for product "Tomcat" and version "5.5.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				5.5.27 Search vendor "Apache" for product "Tomcat" and version "5.5.27"		-		Affected