VULNERABILITY INTELLIGENCE
CVE-2005-3164
CVSS score2.6 LOW
EPSS probability6.52%
CISA KEVNot currently listed
Published2005-10-06
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N
Description
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when "unsuitable request body data" is used for a different request, possibly related to Java Servlet pages.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- cve@mitre.org — VDB Entry
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Vendor Advisory