Tomcat — контейнер сервлетов с открытым исходным кодом
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 153
SUSE-SU-2022:0695-1
Security update for tomcat
SUSE-SU-2022:0694-1
Security update for tomcat
GHSA-f268-65qc-98vg
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
GHSA-gc58-v8h3-x2gr
Incorrect Default Permissions in Apache Tomcat
GHSA-53hp-jpwq-2jgq
Uncontrolled Resource Consumption in Apache Tomcat
GHSA-vvw4-rfwf-p6hx
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
GHSA-m7jv-hq7h-mq7c
Infinite Loop in Apache Tomcat
GHSA-vf77-8h7g-gghp
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
GHSA-9f3j-pm6f-9fm5
Race condition in Apache Tomcat
CVE-2022-23181
The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | SUSE-SU-2022:0695-1 Security update for tomcat | 0% Низкий | больше 3 лет назад | |
| SUSE-SU-2022:0694-1 Security update for tomcat | 0% Низкий | больше 3 лет назад | |
| GHSA-f268-65qc-98vg Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat | CVSS3: 4.3 | 10% Низкий | больше 3 лет назад |
| GHSA-gc58-v8h3-x2gr Incorrect Default Permissions in Apache Tomcat | CVSS3: 7.8 | 0% Низкий | больше 3 лет назад |
| GHSA-53hp-jpwq-2jgq Uncontrolled Resource Consumption in Apache Tomcat | CVSS3: 7.5 | 35% Средний | больше 3 лет назад |
| GHSA-vvw4-rfwf-p6hx Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat | CVSS3: 7.5 | 8% Низкий | больше 3 лет назад |
| GHSA-m7jv-hq7h-mq7c Infinite Loop in Apache Tomcat | CVSS3: 7.5 | 92% Критический | больше 3 лет назад |
| GHSA-vf77-8h7g-gghp Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat | CVSS3: 7.5 | 17% Средний | больше 3 лет назад |
| GHSA-9f3j-pm6f-9fm5 Race condition in Apache Tomcat | CVSS3: 7 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-23181 The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore. | CVSS3: 7 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу