E-Commerce & credit card processing - the Open Source way!

Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

tomcat: information disclosure

Package(s):

tomcat5.5

CVE #(s):

CVE-2008-0128

Created:

January 21, 2008

Updated:

March 7, 2008

Description:

From the Debian advisory:

Olaf Kock discovered that HTTPS encryption was insufficiently enforced for single-sign-on cookies, which could result in information disclosure.

Alerts:

SuSE	SUSE-SR:2008:005	2008-03-06
Debian	DSA-1468-1	2008-01-20

(Log in to post comments)