CVE-2002-0493

描述

Apache Tomcat may be started without proper security settings if errors are encountered while reading the `web.xml` file, which could allow attackers to bypass intended restrictions.

如何修補 CVE-2002-0493

要修補 CVE-2002-0493,請將受影響套件升級到下列已修補版本。

• Maven/org.apache.tomcat:tomcat—升級至 4.0b7 或更新版本

CVE-2002-0493 正在被利用嗎?

低 — EPSS 為 3.8%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 4.0b7

參考連結(7)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2002-0493
• PATCHgithub.com/apache/tomcat
• WEBmarc.info/?l=bugtraq&m=101709002410365&w=2
• WEBlists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E