CVE-2020-1935

Published Feb 24, 2020

Last updated 13 days ago

Overview

Description
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.
Source
security@apache.org
NVD status
Modified
Products
tomcat, debian_linux, ubuntu_linux, leap, data_availability_services, oncommand_system_manager, agile_engineering_data_management, agile_product_lifecycle_management, communications_element_manager, communications_instant_messaging_server, health_sciences_empirica_inspections, health_sciences_empirica_signal, hospitality_guest_access, hyperion_infrastructure_technology, instantis_enterprisetrack, mysql_enterprise_monitor, retail_order_broker, siebel_ui_framework, transportation_management, workload_manager

Risk scores

CVSS 3.1

Type
Primary
Base score
4.8
Impact score
2.5
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
5.8
Impact score
4.9
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-444

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.