CVE-2022-23181

🗓️ 27 Jan 2022 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 421 Views

CVE-2022-23181: Time of check, time of use vulnerability in Apache Tomca

Reporter	Title	Published	Views	Family All 196
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2022-23181)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerability in Apache Tomcat	7 Nov 202407:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining (CVE-2022-23181)	1 Feb 202321:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to Using Components with Known Vulnerabilities	25 Jul 202213:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is vulnerable to elevated privileges due to use of Apache Tomcat CVE-2022-23181	18 Jul 202215:21	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Tomcat affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tomcat	29 Jun 202202:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is affected by CVE-2022-23181	25 Mar 202217:01	–	ibm
ATTACKERKB	CVE-2022-23181	27 Jan 202213:15	–	attackerkb

NVD

Vulners

Node

apache tomcatRange8.5.55–8.5.73

apache tomcatRange9.0.35–9.0.56

apache tomcatRange10.0.1–10.0.14

apache tomcatMatch10.0.0milestone10

apache tomcatMatch10.0.0milestone5

apache tomcatMatch10.0.0milestone6

apache tomcatMatch10.0.0milestone7

apache tomcatMatch10.0.0milestone8

apache tomcatMatch10.0.0milestone9

apache tomcatMatch10.1.0milestone1

apache tomcatMatch10.1.0milestone2

apache tomcatMatch10.1.0milestone3

apache tomcatMatch10.1.0milestone4

apache tomcatMatch10.1.0milestone5

apache tomcatMatch10.1.0milestone6

apache tomcatMatch10.1.0milestone7

apache tomcatMatch10.1.0milestone8

Node

oracle agile_engineering_data_managementMatch6.2.1.0

oracle communications_cloud_native_core_policyMatch1.15.0

oracle financial_services_crime_and_compliance_management_studioMatch8.0.8.2.0

oracle financial_services_crime_and_compliance_management_studioMatch8.0.8.3.0

oracle managed_file_transferMatch12.2.1.3.0

oracle managed_file_transferMatch12.2.1.4.0

oracle mysql_enterprise_monitorRange≤8.0.29

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Tomcat",
    "versions": [
      {
        "version": "Apache Tomcat 10.1 10.1.0-M1 to 10.1.0-M8",
        "status": "affected"
      },
      {
        "version": "Apache Tomcat 10.0 10.0.0-M5 to 10.0.14",
        "status": "affected"
      },
      {
        "version": "Apache Tomcat 9 9.0.35 to 9.0.56",
        "status": "affected"
      },
      {
        "version": "Apache Tomcat 8 8.5.55 to 8.5.73",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/l8x62p3k19yfcb208jo4zrb83k5mfwg9
debian	www.debian.org/security/2022/dsa-5265
oracle	www.oracle.com/security-alerts/cpujul2022.html
security	www.security.netapp.com/advisory/ntap-20220217-0010/
lists	www.lists.debian.org/debian-lts-announce/2022/10/msg00029.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html

21 Nov 2024 06:48Current

7.2High risk

Vulners AI Score7.2

CVSS 23.7

CVSS 3.17

EPSS0.00236

CWE-367