Description
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache Tomcat | Apache / Apache Tomcat | 7.0.0 to 7.0.99 | affected |
| Apache Tomcat | Apache / Apache Tomcat | 8.5.0 to 8.5.50 | affected |
| Apache Tomcat | Apache / Apache Tomcat | Apache Tomcat 9.0.0.M1 to 9.0.0.30 | affected |