Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jhrw-x5gg-jjqw

Опубликовано: 23 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations.

This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected.

Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations.

This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected.

Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.

EPSS

Процентиль: 10%
0.00202
Низкий

7.4 High

CVSS3

Дефекты

CWE-366

Связанные уязвимости

CVSS3: 7.4
ubuntu
около 2 месяцев назад

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected. Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.

CVSS3: 4.8
redhat
около 2 месяцев назад

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected. Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.

CVSS3: 7.4
nvd
около 2 месяцев назад

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected. Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.

CVSS3: 7.4
debian
около 2 месяцев назад

Race condition within a thread vulnerability in Apache Tomcat Native a ...

CVSS3: 7.4
redos
17 дней назад

Уязвимость tomcat-native

EPSS

Процентиль: 10%
0.00202
Низкий

7.4 High

CVSS3

Дефекты

CWE-366