CVE-2005-3164
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when "unsuitable request body data" is used for a different request, possibly related to Java Servlet pages.
- EPSS
- 6.5% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:tomcat
- hitachi:cosminexus_application_server
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qhqv-q4xg-f6g7 | Maven | org.apache.tomcat:tomcat | >=4.0.1 <=4.0.6 | no fix published |
| GHSA-qhqv-q4xg-f6g7 | Maven | org.apache.tomcat:tomcat | >=4.1.0 <=4.1.36 | no fix published |