Apache Tomcat CVE-2011-2481 Information Disclosure Vulnerability

Bugtraq ID:	49147
Class:	Design Error
CVE:	CVE-2011-2481
Remote:	Yes
Local:	No
Published:	Aug 15 2011 12:00AM
Updated:	May 23 2017 04:26PM
Credit:	Disclosed by the vendor.
Vulnerable:	HP XP P9000 Performance Advisor 5.4.1 Gentoo Linux Apache Tomcat 7.0.16 Apache Tomcat 7.0.15 Apache Tomcat 7.0.14 Apache Tomcat 7.0.13 Apache Tomcat 7.0.12 Apache Tomcat 7.0.9 Apache Tomcat 7.0.8 Apache Tomcat 7.0.7 Apache Tomcat 7.0.6 Apache Tomcat 7.0.4 Apache Tomcat 7.0.3 Apache Tomcat 7.0.2 Apache Tomcat 7.0.1 Apache Tomcat 7.0 beta Apache Tomcat 7.0 Apache Tomcat 7.0.5 Apache Tomcat 7.0.11 Apache Tomcat 7.0.10 Apache Tomcat 7.0
Not Vulnerable:	HP XP P9000 Performance Advisor 5.5.1 Apache Tomcat 7.0.17

Apache Tomcat CVE-2011-2481 Information Disclosure Vulnerability

Apache Tomcat is prone to a remote information-disclosure vulnerability.

Remote attackers can exploit this issue to obtain sensitive information.

Tomcat versions 7.0.0 through 7.0.16 are vulnerable.

Apache Tomcat CVE-2011-2481 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache Tomcat CVE-2011-2481 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

Apache Tomcat CVE-2011-2481 Information Disclosure Vulnerability

References:

• Apache Tomcat 7.x vulnerabilities (Apache Software Foundation)
  
• Apache Tomcat Homepage (Apache)
  
• HPSBST02955 rev.1 - HP XP P9000 Performance Advisor Software, 3rd party Software (HP)