Apache Tomcat CVE-2013-2071 Information Disclosure Vulnerability

Description

Bug 54178 described a scenario where elements of a previous request may be exposed to a current request. This was very difficult to exploit deliberately but fairly likely to happen unexpectedly if an application used AsyncListeners that threw RuntimeExceptions.

Affected Applications

Apache Tomcat

CVE References

Other References