Riskcovery

CVE-2017-15706

State
Published
Severity
Not scored
Published
Jan 31, 2018
Updated
Sep 16, 2024
Reserved
Oct 21, 2017

Read the record on cve.org

Description

As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.0.47 and 7.0.79 to 7.0.82 included an updated description of the search algorithm used by the CGI Servlet to identify which script to execute. The update was not correct. As a result, some scripts may have failed to execute as expected and other scripts may have been executed unexpectedly. Note that the behaviour of the CGI servlet has remained unchanged in this regard. It is only the documentation of the behaviour that was wrong and has been corrected.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Apache TomcatApache Software Foundation
  • 9.0.0.M22 to 9.0.1Affected
  • 8.5.16 to 8.5.23Affected
  • 8.0.45 to 8.0.47Affected
  • 7.0.79 to 7.0.82Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.