CVE-2011-1088

N/A Unknown
Published: March 14, 2011 Modified: April 29, 2026
View on NVD

Description

Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://mail-archives.apache.org/mod_mbox/www-announce/201103.mbox/%3C4D6E74FF.7050106%40apache.org%3E
Source: secalert@redhat.com
http://markmail.org/message/lzx5273wsgl5pob6
Source: secalert@redhat.com
http://markmail.org/message/yzmyn44f5aetmm2r
Source: secalert@redhat.com
http://secunia.com/advisories/43684
Source: secalert@redhat.com
Vendor Advisory
http://svn.apache.org/viewvc?view=revision&revision=1076586
Source: secalert@redhat.com
Patch
http://svn.apache.org/viewvc?view=revision&revision=1076587
Source: secalert@redhat.com
http://svn.apache.org/viewvc?view=revision&revision=1077995
Source: secalert@redhat.com
http://tomcat.apache.org/security-7.html
Source: secalert@redhat.com
Vendor Advisory
http://www.osvdb.org/71027
Source: secalert@redhat.com
http://www.securityfocus.com/archive/1/517013/100/0/threaded
Source: secalert@redhat.com
http://www.securityfocus.com/bid/46685
Source: secalert@redhat.com
http://www.securitytracker.com/id?1025215
Source: secalert@redhat.com
http://www.vupen.com/english/advisories/2011/0563
Source: secalert@redhat.com
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65971
Source: secalert@redhat.com
http://mail-archives.apache.org/mod_mbox/www-announce/201103.mbox/%3C4D6E74FF.7050106%40apache.org%3E
Source: af854a3a-2127-422b-91ae-364da2661108
http://markmail.org/message/lzx5273wsgl5pob6
Source: af854a3a-2127-422b-91ae-364da2661108
http://markmail.org/message/yzmyn44f5aetmm2r
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/43684
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://svn.apache.org/viewvc?view=revision&revision=1076586
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://svn.apache.org/viewvc?view=revision&revision=1076587
Source: af854a3a-2127-422b-91ae-364da2661108
http://svn.apache.org/viewvc?view=revision&revision=1077995
Source: af854a3a-2127-422b-91ae-364da2661108
http://tomcat.apache.org/security-7.html
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.osvdb.org/71027
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/517013/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/46685
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1025215
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0563
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65971
Source: af854a3a-2127-422b-91ae-364da2661108

28 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
6.5%
93th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

apache