NetSight
IP …
high7.5

CVE-2020-17527

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Impact

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.tomcat:tomcat-coyote>= 10.0.0-M1, < 10.0.0-M1010.0.0-M10

Affected products

VendorProductAffected versions
ApacheTomcat
from 8.5.1 through 8.5.59
from 9.0.1 through 9.0.35
Versions 9.0.0, 9.0.35-3.39.1, 9.0.35-3.57.3, 9.0.36
NetappElement Plug-In
All versions
NetappOncommand System Manager
from 3.0.0 through 3.1.3
DebianDebian Linux
Versions 9.0, 10.0
OracleBlockchain Platform
before 21.1.2
OracleCommunications Cloud Native Core Binding Support Function
Version 1.10.0
OracleCommunications Cloud Native Core Policy
Version 1.14.0
OracleCommunications Instant Messaging Server
Version 10.0.1.5.0
OracleInstantis Enterprisetrack
Versions 17.1, 17.2, 17.3
OracleMysql Enterprise Monitor
before 8.0.23
OracleSd-Wan Edge
Version 9.0
OracleWorkload Manager
Versions 18c, 19c

Weakness classification

CWE-200

References