Apache Tomcat Multiple Vulnerabilities
Release Date: 19 Nov 2024
RISK: Medium Risk
TYPE: Servers - Web Servers
Multiple vulnerabilities were identified in Apache Tomcat, a remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, cross-site scripting and information disclosure on the targeted system.
Impact
- Security Restriction Bypass
- Information Disclosure
- Cross-Site Scripting
System / Technologies affected
- Apache Tomcat 11.0.0
- Apache Tomcat 11.0.0-M1 to 11.0.0-M26
- Apache Tomcat 10.1.31
- Apache Tomcat version 10.1.0-M1 to 10.1.30
- Apache Tomcat 9.0.96
- Apache Tomcat version 9.0.0-M1 to 9.9.95
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- Apache Tomcat 11.0.1 or later
- Apache Tomcat 10.1.33 or later
- Apache Tomcat 9.0.97 or later
沒有留言:
發佈留言