{"id":"CVE-2007-5333","published":"2008-02-12T00:00:00Z","modified":"2024-08-07T15:24:42Z","title":"Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in Apache Tomcat, versions 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36, where cookie values containing double quote characters or encoded backslash (%5C) sequences are not properly handled. An attacker who can get a victim's browser to send or expose such a cookie may be able to leak sensitive information such as session IDs and hijack sessions.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:21:56Z"},"cvss":null,"epss":{"score":0.62575,"percentile":0.99187,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.vupen.com/english/advisories/2008/2690","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/33330","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://tomcat.apache.org/security-4.html","tags":["x_refsource_CONFIRM"]},{"url":"http://support.apple.com/kb/HT2163","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/30676","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/27706","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://securityreason.com/securityalert/3636","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://jvn.jp/jp/JVN%2309470767/index.html","tags":["third-party-advisory","x_refsource_JVN"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20133","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11177","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://secunia.com/advisories/28915","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/37460","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20991","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"http://www.securityfocus.com/bid/31681","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/28884","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/487822/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012048","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/28878","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/32036","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0488","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/44183","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:018","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html","tags":["x_refsource_CONFIRM"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/57126","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/32222","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/30802","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012047","tags":["x_refsource_CONFIRM"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-10.xml","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","tags":["x_refsource_CONFIRM"]},{"url":"http://tomcat.apache.org/security-5.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://support.apple.com/kb/HT3216","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24018932","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/29711","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532111","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=6.0.0, <6.0.15",">=5.5.0, <5.5.26",">=4.1.0, <4.1.37"],"patched":["6.0.15","5.5.26","4.1.37"],"from":["GHSA-cww4-vj5r-rx57"],"provenance":"source"}],"advisories":[{"id":"GHSA-cww4-vj5r-rx57","url":"https://github.com/advisories/GHSA-cww4-vj5r-rx57","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=6.0.0, <6.0.15"],"patched":["6.0.15"],"provenance":"source","from":"GHSA"},{"id":"GHSA-cww4-vj5r-rx57","url":"https://github.com/advisories/GHSA-cww4-vj5r-rx57","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=5.5.0, <5.5.26"],"patched":["5.5.26"],"provenance":"source","from":"GHSA"},{"id":"GHSA-cww4-vj5r-rx57","url":"https://github.com/advisories/GHSA-cww4-vj5r-rx57","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=4.1.0, <4.1.37"],"patched":["4.1.37"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-3654","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3654","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":31130,"url":"https://www.exploit-db.com/exploits/31130","title":"Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure","type":"remote","platform":"multiple","date":"2008-02-09","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2008-02-09"},"first":{"date":"2008-02-09","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/31130"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2008-02-09","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-31130)","url":"https://www.exploit-db.com/exploits/31130","provenance":"source"},{"date":"2008-02-12","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2007-5333","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.84,"detail":"percentile 0.9919"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-org-apache-tomcat-tomcat-cve-2007-3385","parents":[{"from":"CVE-2007-3385","to":"CVE-2007-5333","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.","from":"CVE.org","in":"CVE-2007-5333"},{"kind":"similar","provenance":"machine","score":0.64,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2008-4308","published":"2009-02-26","fixed":"5.5.21","kev":false},{"cve":"CVE-2007-0450","published":"2007-03-16","fixed":"6.0.10","kev":false},{"cve":"CVE-2007-2450","published":"2007-06-14","fixed":"6.0.14","kev":false,"link":{"from":"CVE-2007-2450","to":"CVE-2007-5333","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"5.5.25","toFixed":"5.5.26","daysApart":243},{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"6.0.14","toFixed":"6.0.15","daysApart":243}]}},{"cve":"CVE-2007-5333","published":"2008-02-12","fixed":"6.0.15","kev":false},{"cve":"CVE-2008-0002","published":"2008-02-12","fixed":"6.0.16","kev":false,"link":{"from":"CVE-2007-5333","to":"CVE-2008-0002","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"6.0.15","toFixed":"6.0.16","daysApart":0}]}},{"cve":"CVE-2008-1232","published":"2008-08-04","fixed":"6.0.17","kev":false,"link":{"from":"CVE-2007-5333","to":"CVE-2008-1232","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"4.1.37","toFixed":"4.1.38","daysApart":174}]}},{"cve":"CVE-2008-1947","published":"2008-06-04","fixed":"6.0.18","kev":false},{"cve":"CVE-2008-2370","published":"2008-08-04","fixed":"6.0.18","kev":false,"link":{"from":"CVE-2007-5333","to":"CVE-2008-2370","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"4.1.37","toFixed":"4.1.38","daysApart":174}]}}],"package":"Maven:org.apache.tomcat:tomcat"}}