文件
websafe-kb/08-threat-intel/registry/advisories/apache-tomcat--CVE-2007-1491.json

67 行
1.8 KiB
JSON

{
"canonical_id": "apache-tomcat--CVE-2007-1491",
"system_id": "apache-tomcat",
"display_name": "Apache Tomcat",
"category": "servers",
"advisory_mode": "server",
"title": "CVE-2007-1491",
"summary": "Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.",
"published_at": "2007-03-16T22:19:00.000",
"updated_at": "2025-04-09T00:30:58.490",
"severity": "medium",
"cvss_score": 5.2,
"exploit_status": "unknown",
"source_confidence": "official",
"official_source_url": "http://secunia.com/advisories/24434",
"secondary_source_urls": [
"http://support.avaya.com/elmodocs2/security/ASA-2007-051.htm",
"http://www.osvdb.org/33346"
],
"aliases": [
"CVE-2007-1491"
],
"cve_ids": [
"CVE-2007-1491"
],
"ghsa_ids": [],
"osv_ids": [],
"affected_versions": [],
"fixed_versions": [],
"package_name": null,
"render_markdown": false,
"case_path": null,
"secure_code_topics": [
"request-smuggling-boundary",
"authz-server-side-recheck",
"path-traversal-guard"
],
"status": "triage",
"triage_reasons": [
"missing affected/fixed version details"
],
"verification_status": "triage-manual",
"verification_mode": "synthetic",
"last_verified_at": null,
"last_run_id": null,
"evidence_bundle": null,
"historical_status": null,
"latest_status": null,
"browser_evidence": {
"required": false,
"present": false,
"refs": []
},
"repro_profile_id": "authz-bypass-generic",
"artifact_mode": "official-image",
"blocked_reason": null,
"metadata": {
"source_names": [
"NVD Tomcat"
],
"source_kinds": [
"nvd-search"
],
"candidate_count": 1
}
}