Описание
Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 10.1.55-1ubuntu1 |
| esm-apps/noble | released | 10.1.16-1ubuntu0.1~esm4 |
| esm-apps/resolute | released | 10.1.40-1ubuntu1.26.04.1 |
| jammy | DNE | |
| noble | needed | |
| questing | released | 10.1.40-1ubuntu1.25.10.1 |
| resolute | released | 10.1.40-1ubuntu1.26.04.1 |
| upstream | released | 10.1.55 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 11.0.22 |
| esm-apps/resolute | needed | |
| jammy | DNE | |
| noble | DNE | |
| questing | ignored | end of life, was needed |
| resolute | needed | |
| upstream | released | 11.0.22 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | not-affected | see notes |
| esm-infra-legacy/trusty | released | 6.0.39-1ubuntu0.1+esm3 |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | released | 7.0.68-1ubuntu0.4+esm4 |
| esm-apps/bionic | not-affected | see notes |
| esm-infra-legacy/trusty | released | 7.0.52-1ubuntu0.16+esm2 |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/bionic | needed | |
| esm-infra-legacy/xenial | needed | |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 9.0.118-1 |
| esm-apps/bionic | released | 9.0.16-3ubuntu0.18.04.2+esm8 |
| esm-apps/focal | released | 9.0.31-1ubuntu0.9+esm3 |
| esm-apps/jammy | released | 9.0.58-1ubuntu0.2+esm4 |
| esm-apps/noble | released | 9.0.70-2ubuntu0.1+esm3 |
| esm-apps/resolute | released | 9.0.115-1ubuntu0.1 |
| jammy | needed | |
| noble | needed | |
| questing | released | 9.0.95-1ubuntu1.1 |
| resolute | released | 9.0.115-1ubuntu0.1 |
Показывать по
7.5 High
CVSS3
Связанные уязвимости
Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
Improper Handling of Case Sensitivity vulnerability in LockOutRealm in ...
Apache Tomcat: LockOutRealm treats user names as case-sensitive
Уязвимость компонента LockOutRealm сервера приложений Apache Tomcat, позволяющая нарушителю обойти существующие механизмы безопасности
7.5 High
CVSS3