Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Bamboo Data Center and Server

🗓️ 14 Dec 2023 07:45:15Reported by security-metrics-botType

High severity org.apache.tomcat:tomcat-catalina Dependency vulnerability in Bamboo Data Center and Server versions 9.2.1, 9.3.0, and 9.4.0. Upgrade recommended.

Reporter	Title	Published	Views	Family All 253
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2023-46589)	5 Mar 202408:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to HTTP request smuggling and a denial of service due to Apache Tomcat. (CVE-2023-46589, CVE-2023-42794)	3 Jan 202414:43	–	ibm
IBM Security Bulletins	Security Bulletin: due to the use of Apache Tomcat, IBM webMethods developer portal is affected by Multiple Vulnerabilities	30 Sep 202510:47	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Apache Tomcat, App Connect Professional is vulnerable to HTTP request smuggling.	16 Feb 202413:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) may be vulnerable to HTTP request smuggling (CVE-2023-46589)	5 Feb 202413:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator Document Service container vulnerable to multiple issues due to Apache Tomcat	11 Apr 202413:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2023-46589)	11 Sep 202410:22	–	ibm