CVE-2024-21733

🗓️ 19 Jan 2024 10:29:04Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 107 Views

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat from versions 8.5.7 through 8.5.63 and 9.0.0-M11 through 9.0.43

Reporter	Title	Published	Views	Family All 95
zdt	Apache Tomcat 8.5.63 / 9.0.43 HTTP Response Smuggling Vulnerability	1 Feb 202400:00	–	zdt
githubexploit	Exploit for Generation of Error Message Containing Sensitive Information in Apache Tomcat	15 Aug 202409:47	–	githubexploit
ibm	Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:25	–	ibm
ibm	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
ibm	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
ibm	Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products (CVE-2023-45648, CVE-2023-42795, CVE-2023-46589, CVE-2024-21733)	30 Apr 202416:46	–	ibm
ibm	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Apr 202413:12	–	ibm
nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2024-017)	6 Feb 202400:00	–	nessus
nessus	Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-011)	6 Feb 202400:00	–	nessus
nessus	Amazon Linux AMI : tomcat8 (ALAS-2021-1547)	5 Nov 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	tomcat9	9.0.43-2~deb11u11	tomcat9_9.0.43-2~deb11u11_any.deb
Debian	12	any	tomcat9	9.0.53-1	tomcat9_9.0.53-1_any.deb
Debian	13	any	tomcat9	9.0.53-1	tomcat9_9.0.53-1_any.deb
Debian	14	any	tomcat9	9.0.53-1	tomcat9_9.0.53-1_any.deb
Debian	999	any	tomcat9	9.0.53-1	tomcat9_9.0.53-1_any.deb

19 Jan 2024 10:29Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3

EPSS0.14286

SSVC