CVE-2022-29885

🗓️ 12 May 2022 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 395 Views

Documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for EncryptInterceptor incorrectly stated enabling Tomcat clustering over untrusted network

Reporter	Title	Published	Views	Family All 139
0day.today	Apache Tomcat 10.1 - Denial Of Service Exploit	5 Apr 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat, Apache Commons FileUpload and Apache Axis might affect IBM Storage Copy Data Management	22 Mar 202416:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is vulnerable to denial of service due to use of Apache Tomcat (CVE-2022-29885).	18 Jul 202215:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerability in Apache Tomcat	7 Nov 202407:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is vulnerable to a denial of service due to use of Apache Tomcat CVE-2022-29885	18 Jul 202215:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge is vulnerable to a denial of service due to use of Apache Tomcat server (CVE-2022-29885).	21 Jul 202205:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
GithubExploit	Exploit for Uncontrolled Resource Consumption in Apache Tomcat	30 Jun 202216:09	–	githubexploit

NVD

Vulners

Node

apache tomcatRange8.5.38–8.5.78

apache tomcatRange9.0.13–9.0.62

apache tomcatRange10.0.0–10.0.20

apache tomcatMatch10.1.0milestone1

apache tomcatMatch10.1.0milestone10

apache tomcatMatch10.1.0milestone11

apache tomcatMatch10.1.0milestone12

apache tomcatMatch10.1.0milestone13

apache tomcatMatch10.1.0milestone14

apache tomcatMatch10.1.0milestone2

apache tomcatMatch10.1.0milestone3

apache tomcatMatch10.1.0milestone4

apache tomcatMatch10.1.0milestone5

apache tomcatMatch10.1.0milestone6

apache tomcatMatch10.1.0milestone7

apache tomcatMatch10.1.0milestone8

apache tomcatMatch10.1.0milestone9

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

oracle hospitality_cruise_shipboard_property_management_systemMatch20.2.1

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Tomcat",
    "versions": [
      {
        "version": "Apache Tomcat 10.1 10.1.0-M1 to 10.1.0-M14",
        "status": "affected"
      },
      {
        "version": "Apache Tomcat 10 10.0.0-M1 to 10.0.20",
        "status": "affected"
      },
      {
        "version": "Apache Tomcat 9 9.0.13 to 9.0.62",
        "status": "affected"
      },
      {
        "version": "Apache Tomcat 8.5 8.5.38 to 8.5.78",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/10/msg00029.html
debian	www.debian.org/security/2022/dsa-5265
security	www.security.netapp.com/advisory/ntap-20220629-0002/
packetstormsecurity	www.packetstormsecurity.com/files/171728/Apache-Tomcat-10.1-Denial-Of-Service.html
lists	www.lists.apache.org/thread/2b4qmhbcyqvc7dyfpjyx54c03x65vhcv
oracle	www.oracle.com/security-alerts/cpujul2022.html

21 Nov 2024 06:59Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.55532

CWE-400