Описание
Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps/noble | needed | |
| jammy | DNE | |
| noble | needed | |
| plucky | needed | |
| upstream | released | 10.1.41 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| upstream | released | 11.0.7 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-apps/bionic | needed | |
| esm-apps/focal | needed | |
| esm-apps/jammy | needed | |
| esm-apps/noble | not-affected | |
| jammy | needed | |
| noble | not-affected | 9.0.70-2ubuntu0.1 |
| plucky | not-affected | |
| upstream | released | 9.0.70-2 |
Показывать по
Ссылки на источники
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
Session Fixation vulnerability in Apache Tomcat via rewrite valve. Th ...
Уязвимость сервера приложений Apache Tomcat, связанная с недостатками разграничения доступа, позволяющая нарушителю перехватить сеанс и получить доступ к учетной записи пользователя
EPSS
6.5 Medium
CVSS3