CVE-2007-5461

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain…

published October 15, 2007

CVSS
—
EPSS
40%
Percentile
98.6
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.39681 · 98.6th percentile
Published
2007-10-15T18:00Z
EPSS history
Timeline
  • 15 OCT 18:00Z
    Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain…
    cvelistv5