Apache Releases Security Advisory for Tomcat

🗓️ 15 Jan 2021 00:00:00Reported by CISAType

Apache Releases Security Advisory for Tomcat addressing vulnerability affecting multiple versions and obtaining sensitive information. CISA encourages review of security advisory for CVE-2021-24122 and upgrade to appropriate version. Privacy & Use policy applies

Reporter	Title	Published	Views	Family All 137
IBM Security Bulletins	Security Bulletin: CVE-2021-24122 When serving resources from a network location using the NTFS file system, Apache Tomcat versions 8.5.0 to 8.5.59 were susceptible to JSP source code disclo	29 Mar 202121:19	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2021-24122)	2 Mar 202105:19	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by Apache Tomcat vulnerabilities.	19 Feb 202104:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-24122	25 Jan 202207:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat Vulnerabilities Affect IBM Control Center	14 May 202121:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
Tenable Nessus	Amazon Linux 2 : tomcat (ALAS-2025-2812)	1 Apr 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-010)	27 Sep 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2021-1175)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : tomcat (EulerOS-SA-2021-1856)	30 Apr 202100:00	–	nessus

Source	Link
mail-archives	www.mail-archives.us.apache.org/mod_mbox/www-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E

15 Jan 2021 00:00Current

2.2Low risk

Vulners AI Score2.2

EPSS0.22852