The vulnerability of the Apache Tomcat application server lies in the lack of protection for operational data, allowing attackers to access confidential information.

🗓️ 23 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Tomcat vulnerability: unprotected operational data enables remote access to confidential information.

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat, Apache Commons FileUpload and Apache Axis might affect IBM Storage Copy Data Management	22 Mar 202416:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: Datapower Operations Dashboard Multiple Vulnerabilities in Apache Tomcat	7 Feb 202416:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	24 Oct 202319:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining . CVE-2023-34981	9 Oct 202310:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2023-34981)	18 Jul 202314:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Apache Tomcat [CVE-2023-34981]	30 Nov 202318:51	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.11 addresses multiple security vulnerabilities.	20 Dec 202316:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build 6.1.7.10 addresses multiple vulnerabilities.	26 Mar 202503:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	24 Aug 202309:23	–	ibm

Vulners

Node

apache tomcatMatch10.1.8

OR

apache tomcatMatch11.0.0-m5

OR

apache tomcatMatch9.0.74

OR

apache tomcatMatch8.5.88

Source	Link
lists	www.lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz
vuldb	www.vuldb.com/ru/
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

11 Apr 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.5

CVSS 27.8

EPSS0.00275

Tomcat server operational data remote access confidential information