CVE-2020-17527

CWE-200 — Information Exposure15 documents10 sources
Severity
7.5HIGH
EPSS
10.5%
top 6.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Oracle Blockchain PlatformOracle Mysql Enterprise MonitorApache Tomcat+9 more
Timeline
PublishedDec 3
Latest updateApr 15

Description

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages14 packages

▶Mavenorg.apache.tomcat:tomcat-coyote10.0.0-M1 — 10.0.0-M10+2
▶NVDapache/tomcat8.5.1 — 8.5.59+9
▶CVEListV5apache_software_foundation/apache_tomcatApache Tomcat 10 10.0.0-M1 to 10.0.0-M9, Apache Tomcat 8.5 8.5.0 to 8.5.59, Apache Tomcat 9 9.0.0-M1 to 9.0.39+2
▶Debiantomcat9< 9.0.40-1+3
▶Ubuntutomcat9< 9.0.16-3ubuntu0.18.04.2+1

Also affects: Debian Linux 10.0, 9.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

5
OSV
tomcat9 vulnerabilities↗2022-03-31
▶
OSV
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat↗2022-02-09
▶
GHSA
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat↗2022-02-09
▶
CVEList
Apache Tomcat: Request header mix-up between HTTP/2 streams↗2020-12-03
▶
OSV
CVE-2020-17527: While investigating bug 64830 it was discovered that Apache Tomcat 10↗2020-12-03
▶

📋Vendor Advisories

9
Oracle
Oracle Oracle Blockchain Platform Risk Matrix: BCS Console (Apache Tomcat) — CVE-2020-17527↗2022-04-15
▶
Ubuntu
Tomcat vulnerabilities↗2022-03-31
▶
Oracle
Oracle Oracle Communications Risk Matrix: Binding Support Function (Apache Tomcat) — CVE-2020-17527↗2022-01-15
▶
Oracle
Oracle Oracle Big Data Graph Risk Matrix: Big Data Graph (Apache Tomcat) — CVE-2020-17527↗2021-07-15
▶
Oracle
Oracle Oracle Database Server Risk Matrix: Workload Manager (Apache Tomcat) — CVE-2020-17527↗2021-04-15
▶