2024年12月18日星期三

Apache Tomcat Multiple Vulnerabilities

Release Date: 18 Dec 2024

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities were identified in Apache Tomcat, a remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.


Impact

  • Denial of Service
  • Remote Code Execution

System / Technologies affected

  • Apache Tomcat 9.0.0.M1 to 9.0.97
  • Apache Tomcat 10.1.0-M1 to 10.1.33
  • Apache Tomcat 11.0.0-M1 to 11.0.1
 

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

 

  • Apache Tomcat 9.0.98 or later
  • Apache Tomcat 10.1.34 or later
  • Apache Tomcat 11.0.2 or later

Vulnerability Identifier


Source


Related Link

沒有留言:

發佈留言

ChromeOS 多個漏洞

ChromeOS 多個漏洞 發佈日期 : 2026 年 11 月 09 日 於 ChromeOS 發現多個漏洞。遠端攻擊者可利用這些漏洞,於目標系統觸發資料篡改、繞過保安限制、敏感資料洩露及遠端執行任意程式碼。 影響 篡改 遠端執行程式碼 ...