7.5

CVE-2009-3548

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
ApacheTomcat Version3.0
ApacheTomcat Version3.1
ApacheTomcat Version3.1.1
ApacheTomcat Version3.2
ApacheTomcat Version3.2.1
ApacheTomcat Version3.2.2
ApacheTomcat Version3.2.2 Updatebeta2
ApacheTomcat Version3.2.3
ApacheTomcat Version3.2.4
ApacheTomcat Version3.3
ApacheTomcat Version3.3.1
ApacheTomcat Version3.3.1a
ApacheTomcat Version3.3.2
ApacheTomcat Version4.0.0
ApacheTomcat Version4.0.1
ApacheTomcat Version4.0.2
ApacheTomcat Version4.0.3
ApacheTomcat Version4.0.4
ApacheTomcat Version4.0.5
ApacheTomcat Version4.0.6
ApacheTomcat Version4.1.0
ApacheTomcat Version4.1.1
ApacheTomcat Version4.1.2
ApacheTomcat Version4.1.3
ApacheTomcat Version4.1.3 Updatebeta
ApacheTomcat Version4.1.4
ApacheTomcat Version4.1.5
ApacheTomcat Version4.1.6
ApacheTomcat Version4.1.7
ApacheTomcat Version4.1.8
ApacheTomcat Version4.1.9
ApacheTomcat Version4.1.9 Updatebeta
ApacheTomcat Version4.1.10
ApacheTomcat Version4.1.11
ApacheTomcat Version4.1.12
ApacheTomcat Version4.1.13
ApacheTomcat Version4.1.14
ApacheTomcat Version4.1.15
ApacheTomcat Version4.1.16
ApacheTomcat Version4.1.17
ApacheTomcat Version4.1.18
ApacheTomcat Version4.1.19
ApacheTomcat Version4.1.20
ApacheTomcat Version4.1.21
ApacheTomcat Version4.1.22
ApacheTomcat Version4.1.23
ApacheTomcat Version4.1.24
ApacheTomcat Version4.1.25
ApacheTomcat Version4.1.26
ApacheTomcat Version4.1.27
ApacheTomcat Version4.1.28
ApacheTomcat Version4.1.29
ApacheTomcat Version4.1.30
ApacheTomcat Version4.1.31
ApacheTomcat Version4.1.32
ApacheTomcat Version4.1.33
ApacheTomcat Version4.1.34
ApacheTomcat Version4.1.35
ApacheTomcat Version4.1.36
ApacheTomcat Version4.1.37
ApacheTomcat Version4.1.38
ApacheTomcat Version4.1.39
ApacheTomcat Version5.0.0
ApacheTomcat Version5.0.1
ApacheTomcat Version5.0.2
ApacheTomcat Version5.0.3
ApacheTomcat Version5.0.4
ApacheTomcat Version5.0.5
ApacheTomcat Version5.0.6
ApacheTomcat Version5.0.7
ApacheTomcat Version5.0.8
ApacheTomcat Version5.0.9
ApacheTomcat Version5.0.10
ApacheTomcat Version5.0.11
ApacheTomcat Version5.0.12
ApacheTomcat Version5.0.13
ApacheTomcat Version5.0.14
ApacheTomcat Version5.0.15
ApacheTomcat Version5.0.16
ApacheTomcat Version5.0.17
ApacheTomcat Version5.0.18
ApacheTomcat Version5.0.19
ApacheTomcat Version5.0.21
ApacheTomcat Version5.0.22
ApacheTomcat Version5.0.23
ApacheTomcat Version5.0.24
ApacheTomcat Version5.0.25
ApacheTomcat Version5.0.26
ApacheTomcat Version5.0.27
ApacheTomcat Version5.0.28
ApacheTomcat Version5.0.29
ApacheTomcat Version5.0.30
ApacheTomcat Version5.5.0
ApacheTomcat Version5.5.1
ApacheTomcat Version5.5.2
ApacheTomcat Version5.5.3
ApacheTomcat Version5.5.4
ApacheTomcat Version5.5.5
ApacheTomcat Version5.5.6
ApacheTomcat Version5.5.7
ApacheTomcat Version5.5.8
ApacheTomcat Version5.5.9
ApacheTomcat Version5.5.10
ApacheTomcat Version5.5.11
ApacheTomcat Version5.5.12
ApacheTomcat Version5.5.13
ApacheTomcat Version5.5.14
ApacheTomcat Version5.5.15
ApacheTomcat Version5.5.16
ApacheTomcat Version5.5.17
ApacheTomcat Version5.5.18
ApacheTomcat Version5.5.19
ApacheTomcat Version5.5.20
ApacheTomcat Version5.5.21
ApacheTomcat Version5.5.22
ApacheTomcat Version5.5.23
ApacheTomcat Version5.5.24
ApacheTomcat Version5.5.25
ApacheTomcat Version5.5.26
ApacheTomcat Version5.5.27
ApacheTomcat Version5.5.28
ApacheTomcat Version6.0
ApacheTomcat Version6.0.0
ApacheTomcat Version6.0.1
ApacheTomcat Version6.0.2
ApacheTomcat Version6.0.3
ApacheTomcat Version6.0.4
ApacheTomcat Version6.0.5
ApacheTomcat Version6.0.6
ApacheTomcat Version6.0.7
ApacheTomcat Version6.0.8
ApacheTomcat Version6.0.9
ApacheTomcat Version6.0.10
ApacheTomcat Version6.0.11
ApacheTomcat Version6.0.12
ApacheTomcat Version6.0.13
ApacheTomcat Version6.0.14
ApacheTomcat Version6.0.15
ApacheTomcat Version6.0.16
ApacheTomcat Version6.0.17
ApacheTomcat Version6.0.18
ApacheTomcat Version6.0.20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 88.35% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P