Apache Tomcat Request and/or response mix-up

🗓️ 18 Nov 2024 12:30:43Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 28 Views

Apache Tomcat HTTP/2 vulnerability fi

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a remote attack due to Apache Tomcat (CVE-2024-52317)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	15 Apr 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-52317) affects Power HMC.	18 Feb 202511:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.	23 Jun 202513:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	13 Mar 202516:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0	15 Apr 202503:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build addresses multiple vulnerabilities.	25 Jun 202511:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	24 Jun 202506:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2024-52316, CVE-2024-52317, CVE-2024-52318)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect watsonx.data	27 Feb 202513:22	–	ibm

Vulners

Node

org.apache.tomcat tomcat-coyoteRange11.0.0-M23–11.0.0maven

OR

org.apache.tomcat tomcat-coyoteRange10.1.27–10.1.31maven

OR

org.apache.tomcat.embed tomcat-embed-coreRange11.0.0-M23–11.0.0maven

OR

org.apache.tomcat.embed tomcat-embed-coreRange10.1.27–10.1.31maven

OR

org.apache.tomcat tomcat-coyoteRange9.0.92–9.0.96maven

OR

org.apache.tomcat.embed tomcat-embed-coreRange9.0.92–9.0.96maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-52317
lists	www.lists.apache.org/thread/ty376mrxy1mmxtw3ogo53nc9l3co3dfs
github	www.github.com/apache/tomcat/commit/146f94f87ea398fb592c7a20a5ccbef95e9dd72b
github	www.github.com/apache/tomcat/commit/47307ee27abcdea2ee40e33897aca760083de46a
github	www.github.com/apache/tomcat/commit/9e840ccacb40881c03a03b1e0746bfba7369b3bd
security	www.security.netapp.com/advisory/ntap-20250124-0004
openwall	www.openwall.com/lists/oss-security/2024/11/18/3
github	www.github.com/advisories/GHSA-qvf5-hvjx-wm27

24 Jan 2025 21:41Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.21066

SSVC

apache tomcat http/2 vulnerability fix