Описание
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.
The following versions were EOL at the time the CVE was created but are
known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected.
Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121 which fix the issue.
A flaw was found in Apache Tomcat. An off-by-one error in the RewriteValve's [N] flag processing causes rewrite rules to restart at the second rule instead of the first. This vulnerability may allow an attacker to bypass intended access controls.
Отчет
This is an Important flaw in Apache Tomcat due to an off-by-one error in the RewriteValve's [N] flag processing. This vulnerability can lead to an access control bypass, allowing unauthorized access to resources in applications that utilize the RewriteValve with the [N] flag.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | tomcat | Under investigation | ||
| Red Hat Enterprise Linux 10 | tomcat9 | Under investigation | ||
| Red Hat Enterprise Linux 6 | tomcat6 | Under investigation | ||
| Red Hat Enterprise Linux 7 | tomcat | Under investigation | ||
| Red Hat Enterprise Linux 8 | pki-deps:10.6/pki-servlet-engine | Under investigation | ||
| Red Hat Enterprise Linux 8 | tomcat | Under investigation | ||
| Red Hat Enterprise Linux 9 | tomcat | Under investigation | ||
| Red Hat JBoss Web Server 5 | tomcat | Out of support scope | ||
| Red Hat JBoss Web Server 6 | tomcat | Affected | ||
| Red Hat JBoss Web Server 7 | tomcat | Affected |
Показывать по
Дополнительная информация
Статус:
EPSS
8.2 High
CVSS3
Связанные уязвимости
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121 which fix the issue.
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121 which fix the issue.
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag ...
EPSS
8.2 High
CVSS3