Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA19263
HistoryApr 01, 2022 - 12:00 a.m.

KLA19263 OSI vulnerability in Apache Tomcat

2022-04-0100:00:00
Kaspersky Lab
threats.kaspersky.com
22
apache tomcat
vulnerability
information disclosure
malicious users
sensitive information
update
osi
security bypass
affected products
cve-2021-43980

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

Information disclosure vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

Apache Tomcat 10.x vulnerabilities

Apache Tomcat 9.x vulnerabilities

Apache Tomcat 8.x vulnerabilities

Related products

Apache-Tomcat

CVE list

CVE-2021-43980 warning

Solution

Update to the latest versionTomcat 9.0 Software DownloadsTomcat 8.5 Software Downloads

Tomcat 10.0 Software Downloads

Impacts

  • OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • Apache Tomcat 10.x earlier than 10.0.20Apache Tomcat 9.x earlier than 9.0.62Apache Tomcat 8.x earlier than 8.5.78

Related

openvas 8
debiancve 1
ibm 8
redhatcve 1
nessus 19
github 1
osv 5
prion 1
tomcat 4
cvelist 1
veracode 1
ubuntucve 1
f5 1
nvd 1
cve 1
amazon 1
redhat 2
debian 2
mageia 1
rosalinux 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4009-1)
2022-11-17 00:00:00
Apache Tomcat Information Disclosure Vulnerability (Sep 2022) - Windows
2022-09-29 00:00:00
Apache Tomcat Information Disclosure Vulnerability (Sep 2022) - Linux
2022-09-29 00:00:00
debiancve
debiancve
CVE-2021-43980
2022-09-28 14:15:09
ibm
ibm
Security Bulletin: Apache Tomcat could allow a remote attacker to obtain sensitive information (CVE-2021-43980)
2022-11-18 19:32:00
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tomcat
2022-11-30 10:25:34
Security Bulletin: IBM UrbanCode Build is affected by CVE-2021-43980
2022-12-20 07:07:06
redhatcve
redhatcve
CVE-2021-43980
2022-09-28 15:18:54
nessus
nessus
RHEL 9 : apache_tomcat (Unpatched Vulnerability)
2024-05-11 00:00:00
SUSE SLES12 Security Update : tomcat (SUSE-SU-2022:4009-1)
2022-11-17 00:00:00
RHEL 8 : apache_tomcat (Unpatched Vulnerability)
2024-05-11 00:00:00
github
github
Apache Tomcat Race Condition vulnerability
2022-09-29 00:00:25
osv
osv
CVE-2021-43980
2022-09-28 14:15:09
Apache Tomcat Race Condition vulnerability
2022-09-29 00:00:25
BIT-tomcat-2021-43980
2024-03-06 11:09:43
prion
prion
Design/Logic Flaw
2022-09-28 14:15:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.62
2022-04-01 00:00:00
Fixed in Apache Tomcat 8.5.78
2022-04-01 00:00:00
Fixed in Apache Tomcat 10.1.0-M14
2022-04-01 00:00:00
cvelist
cvelist
CVE-2021-43980 Apache Tomcat: Information disclosure
2022-09-28 00:00:00
veracode
veracode
Information Disclosure
2022-10-03 08:39:35
ubuntucve
ubuntucve
CVE-2021-43980
2022-09-28 00:00:00
f5
f5
K41102235 : Tomcat vulnerability CVE-2021-43980
2022-10-18 00:00:00
nvd
nvd
CVE-2021-43980
2022-09-28 14:15:09
cve
cve
CVE-2021-43980
2022-09-28 14:15:09
amazon
amazon
Important: tomcat8
2023-04-13 19:01:00
redhat
redhat
(RHSA-2022:7272) Moderate: Red Hat JBoss Web Server 5.7.0 release and security update
2022-11-02 10:37:41
(RHSA-2022:7273) Moderate: Red Hat JBoss Web Server 5.7.0 release and security update
2022-11-02 10:39:18
debian
debian
[SECURITY] [DLA 3160-1] tomcat9 security update
2022-10-26 12:16:26
[SECURITY] [DSA 5265-1] tomcat9 security update
2022-10-29 21:59:51
mageia
mageia
Updated tomcat packages fix security vulnerability
2023-04-15 22:03:44
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON
Related for KLA19263
openvas8debiancve1ibm8redhatcve1nessus19github1osv5prion1tomcat4cvelist1veracode1ubuntucve1f51nvd1cve1amazon1redhat2debian2mageia1rosalinux1