KLA11626 SB vulnerability in Apache Tomcat

Detect date:

12/12/2019

Severity:

High

Description:

Unspecified vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions.

Affected products:

Apache Tomcat 9.x earlier than 9.0.30
Apache Tomcat 7.x earlier than 7.0.99
Apache Tomcat 8.5.x earlier than 8.5.50

Solution:

Update to the latest version
[https://tomcat.apache.org/download-90.cgi](<Tomcat 9 Software Downloads>)
[https://tomcat.apache.org/download-80.cgi](<Tomcat 8 Software Downloads>)
[https://tomcat.apache.org/download-70.cgi](<Tomcat 7 Software Downloads>)

Original advisories:

[http://tomcat.apache.org/security-9.html](<Apache Tomcat 9.x>)
[http://tomcat.apache.org/security-8.html](<Apache Tomcat 8.x>)
[http://tomcat.apache.org/security-7.html](<Apache Tomcat 7.x>)

Impacts:

SB

Related products:

Apache Tomcat

CVE-IDS:

CVE-2019-175635.1High