Posted by Mark Koek on Feb 25
================================================================================
Information disclosure vulnerability in Apache Tomcat
================================================================================
Web version at:
http://www.qcsec.com/blog/CVE-2015-5345-apache-tomcat-vulnerability.html
================================================================================
On a pentest for a client we discovered a way to obtain…