Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2024-21733
HistoryJan 19, 2024 - 11:15 a.m.

CVE-2024-21733

2024-01-1911:15:08
CWE-209
[email protected]
web.nvd.nist.gov
84
cve-2024-21733
apache tomcat
sensitive information
disclosure
vulnerability
nvd
upgrade

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

80.0%

JSON

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43.

Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.

Related

packetstorm 1
osv 3
f5 1
prion 1
openvas 2
zdt 1
hackerone 1
nessus 6
debiancve 1
veracode 1
ubuntucve 1
redhatcve 1
github 1
tomcat 2
ibm 6
packetstorm
packetstorm
Apache Tomcat 8.5.63 / 9.0.43 HTTP Response Smuggling
2024-02-01 00:00:00
osv
osv
CVE-2024-21733
2024-01-19 11:15:08
BIT-tomcat-2024-21733
2024-03-06 11:07:26
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
2024-01-19 12:30:18
f5
f5
K000138392 : Apache Tomcat vulnerability CVE-2024-21733
2024-01-29 00:00:00
prion
prion
Information disclosure
2024-01-19 11:15:00
openvas
openvas
Apache Tomcat Information Disclosure Vulnerability (Jan 2024) - Linux
2024-01-19 00:00:00
Apache Tomcat Information Disclosure Vulnerability (Jan 2024) - Windows
2024-01-19 00:00:00
zdt
zdt
Apache Tomcat 8.5.63 / 9.0.43 HTTP Response Smuggling Vulnerability
2024-02-01 00:00:00
hackerone
hackerone
Internet Bug Bounty: CVE-2024-21733 Apache Tomcat HTTP Request Smuggling (Client- Side Desync) (CWE: 444)
2024-01-19 18:09:45
nessus
nessus
SUSE SLES12 Security Update : tomcat (SUSE-SU-2024:0829-1)
2024-03-13 00:00:00
Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-011)
2024-02-06 00:00:00
Apache Tomcat 8.5.0 < 8.5.64 multiple vulnerabilities
2024-04-29 00:00:00
debiancve
debiancve
CVE-2024-21733
2024-01-19 11:15:08
veracode
veracode
Sensitive Information Disclosure
2024-01-22 05:49:53
ubuntucve
ubuntucve
CVE-2024-21733
2024-01-19 00:00:00
redhatcve
redhatcve
CVE-2024-21733
2024-01-19 15:37:41
github
github
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
2024-01-19 12:30:18
tomcat
tomcat
Fixed in Apache Tomcat 9.0.44
2021-03-10 00:00:00
Fixed in Apache Tomcat 8.5.64
2021-03-10 00:00:00
ibm
ibm
Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.
2024-03-27 17:25:57
Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.
2024-03-27 17:19:49
Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products (CVE-2023-45648, CVE-2023-42795, CVE-2023-46589, CVE-2024-21733)
2024-04-30 16:46:14

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

80.0%

JSON
Related for CVE-2024-21733
packetstorm1osv3f51prion1openvas2zdt1hackerone1nessus6debiancve1veracode1ubuntucve1redhatcve1github1tomcat2ibm6