Apache Tomcat SingleSignOn Remote Information Disclosure Vulnerability

Threat level definition

Apache Tomcat SingleSignOn Remote Information Disclosure Vulnerability

References:

Apache Tomcat Homepage (Apache)
ASF Bugzilla Bug 41217 SingleSignOn Cookie does not honor https access: Login In (Apache)
Debian Tracker CVE-2008-0128 (Debian)
CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) ("Williams, James K" )
CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Computer Associates)
CA20090123-01: Security Notice for Cohesion Tomcat (Computer Associates)
RHSA-2008-0524-4 Red Hat Network Satellite Server security update (Red Hat)
RHSA-2008:0261-4 Moderate: Red Hat Network Satellite Server security update (Red Hat)
RHSA-2008:0630-3 Low: Red Hat Network Satellite Server security update (Red Hat)

Privacy Statement
Copyright 2008, SecurityFocus