CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-4308

The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.076

EPSS Ranking 91.4%

CVSS Severity

CVSS v2 Score 2.6

References

Products affected by CVE-2008-4308

Apache » Tomcat » Version: 4.1.32

cpe:2.3:a:apache:tomcat:4.1.32
Apache » Tomcat » Version: 4.1.33

cpe:2.3:a:apache:tomcat:4.1.33
Apache » Tomcat » Version: 4.1.34

cpe:2.3:a:apache:tomcat:4.1.34
Apache » Tomcat » Version: 5.5.10

cpe:2.3:a:apache:tomcat:5.5.10
Apache » Tomcat » Version: 5.5.11

cpe:2.3:a:apache:tomcat:5.5.11
Apache » Tomcat » Version: 5.5.12

cpe:2.3:a:apache:tomcat:5.5.12
Apache » Tomcat » Version: 5.5.13

cpe:2.3:a:apache:tomcat:5.5.13
Apache » Tomcat » Version: 5.5.14

cpe:2.3:a:apache:tomcat:5.5.14
Apache » Tomcat » Version: 5.5.15

cpe:2.3:a:apache:tomcat:5.5.15
Apache » Tomcat » Version: 5.5.16

cpe:2.3:a:apache:tomcat:5.5.16
Apache » Tomcat » Version: 5.5.17

cpe:2.3:a:apache:tomcat:5.5.17
Apache » Tomcat » Version: 5.5.18

cpe:2.3:a:apache:tomcat:5.5.18
Apache » Tomcat » Version: 5.5.19

cpe:2.3:a:apache:tomcat:5.5.19
Apache » Tomcat » Version: 5.5.20

cpe:2.3:a:apache:tomcat:5.5.20

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-4308

Products

Pricing

Contact Us