Lucene search

K
kasperskyKaspersky LabKLA70302
HistoryJul 03, 2024 - 12:00 a.m.

KLA70302 SB vulnerability in Apache Tomcat

2024-07-0300:00:00
Kaspersky Lab
threats.kaspersky.com
17
apache tomcat
security bypass
malicious users
vulnerability
security restrictions
cve-2024-34750
software update

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

Security bypass vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions.

Original advisories

Apache Tomcat 10.1 vulnerabilities

Apache Tomcat 9.0 vulnerabilities

Related products

Apache-Tomcat

CVE list

CVE-2024-34750 unknown

Solution

Update to the latest versionDownloads Tomcat 10.1 Software Downloads

Tomcat 9.0 Software

Impacts

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • Apache Tomcat 10.1 versions earlier than 10.1.25Apache Tomcat 9.0 versions earlier 9.0.90

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low