Apache Tomcat

ソフト名：Apache Tomcat 6.0.2～6.0.9/6.0.12～6.0.20
回避策：あり
脆弱性：XSS, 認証資格情報の奪取
ソース：http://svn.apache.org/viewvc?view=revision&revision=1037778
http://svn.apache.org/viewvc?view=revision&revision=1037779
http://tomcat.apache.org/
http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html
http://www.securityfocus.com/bid/45015
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4172
http://secunia.com/advisories/42337
http://www.vupen.com/english/advisories/2010/3047
CVE：CVE-2010-4172
危険性：Medium Risk