vulnwire
4.3med

CVE-2009-2901

Improper Authentication in Apache Tomcat

Also known as GHSA-hjfh-7c4v-7q8h

Published 16 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
8.1%
percentile 95%
Public exploits
0
none known

The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.

Exploit prediction (EPSS)

8.12% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.tomcat:tomcat
>=5.5.0, <5.5.29
>=6.0.0, <6.0.24
5.5.29
6.0.24

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
  • CWE-287 Improper Authentication

References

  • securityfocus.com /bid/37942 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /archive/1/509151/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=127420533226623&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • svn.apache.org /viewvc?rev=892815&view=rev · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/39317 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.opensuse.org /opensuse-updates/2012-12/msg00089.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2010:177 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/43310 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1023503 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • lists.apple.com /archives/security-announce/2010//Mar/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • marc.info /?l=bugtraq&m=133469267822771&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • secunia.com /advisories/38541 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2010:176 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • tomcat.apache.org /security-6.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/57126 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vmware.com /support/vsphere4/doc/vsp_vc41_u1_rel_notes.html · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/usn-899-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • support.apple.com /kb/HT4077 · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2010-04/msg00001.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-updates/2013-01/msg00037.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/38346 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/55856 · vdb-entry, x_refsource_XF, x_transferred
  • tomcat.apache.org /security-5.html · x_refsource_CONFIRM, x_transferred
  • vmware.com /security/advisories/VMSA-2011-0003.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/38316 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/516397/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vupen.com /english/advisories/2010/0213 · vdb-entry, x_refsource_VUPEN, x_transferred
  • marc.info /?l=bugtraq&m=139344343412337&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • svn.apache.org /viewvc?rev=902650&view=rev · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-updates/2012-12/msg00090.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.apache.org /thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apa · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apa · mailing-list, x_refsource_MLIST, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2009-2901 · advisory
  • github.com /apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6 · web
  • github.com /apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421 · web
  • github.com /apache/tomcat · package
  • lists.apache.org /thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache · web
  • lists.apache.org /thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache · web
  • lists.apache.org /thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apach · web
  • lists.apache.org /thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apach · web
  • lists.apple.com /archives/security-announce/2010//Mar/msg00001.html · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.