Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information

🗓️ 19 Jan 2024 12:30:18Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 47 Views

Apache Tomcat vulnerability in error message generation with sensitive informatio

Reporter	Title	Published	Views	Family All 104
0day.today	Apache Tomcat 8.5.63 / 9.0.43 HTTP Response Smuggling Vulnerability	1 Feb 202400:00	–	zdt
GithubExploit	Exploit for Generation of Error Message Containing Sensitive Information in Apache Tomcat	15 Aug 202409:47	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products (CVE-2023-45648, CVE-2023-42795, CVE-2023-46589, CVE-2024-21733)	30 Apr 202416:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Apr 202413:12	–	ibm
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2024-017)	6 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-011)	6 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2021-1547)	5 Nov 202100:00	–	nessus

Vulners

Node

org.apache.tomcat.experimental tomcat-embed-programmaticRange9.0.43–9.0.44maven

OR

org.apache.tomcat tomcat-coyoteRange8.5.7–8.5.64maven

OR

org.apache.tomcat.embed tomcat-embed-coreRange9.0.0-M11–9.0.44maven

OR

org.apache.tomcat.embed tomcat-embed-coreRange8.5.7–8.5.64maven

OR

org.apache.tomcat tomcat-coyoteRange9.0.0-M11–9.0.44maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21733
lists	www.lists.apache.org/thread/h9bjqdd0odj6lhs2o96qgowcc6hb0cfz
openwall	www.openwall.com/lists/oss-security/2024/01/19/2
packetstormsecurity	www.packetstormsecurity.com/files/176951/Apache-Tomcat-8.5.63-9.0.43-HTTP-Response-Smuggling.html
security	www.security.netapp.com/advisory/ntap-20240216-0005
github	www.github.com/apache/tomcat/commit/86ccc43940861703c2be96a5f35384407522125a
github	www.github.com/apache/tomcat/commit/ce4b154e7b48f66bd98858626347747cd2514311
tomcat	www.tomcat.apache.org/security-8.html
tomcat	www.tomcat.apache.org/security-9.html
lists	www.lists.debian.org/debian-lts-announce/2025/01/msg00009.html

18 Jun 2026 23:16Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3

EPSS0.14286

SSVC

apache tomcat vulnerability error message sensitive information upgrade