MGASA-2021-0072 Updated tomcat packages fix a security vulnerability

🗓️ 06 Feb 2021 18:20:41Reported by GoogleType

osv

osv🔗 osv.dev👁 8 Views

Tomcat packages updated to fix security vulnerability involving NTFS file system access issue.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: CVE-2021-24122 When serving resources from a network location using the NTFS file system, Apache Tomcat versions 8.5.0 to 8.5.59 were susceptible to JSP source code disclo	29 Mar 202121:19	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2021-24122)	2 Mar 202105:19	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by Apache Tomcat vulnerabilities.	19 Feb 202104:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-24122	25 Jan 202207:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat Vulnerabilities Affect IBM Control Center	14 May 202121:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
Tenable Nessus	Amazon Linux 2 : tomcat (ALAS-2025-2812)	1 Apr 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-010)	27 Sep 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2021-1175)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : tomcat (EulerOS-SA-2021-1856)	30 Apr 202100:00	–	nessus

Source	Link
advisories	www.advisories.mageia.org/MGASA-2021-0072.html
bugs	www.bugs.mageia.org/show_bug.cgi
tomcat	www.tomcat.apache.org/security-9.html
openwall	www.openwall.com/lists/oss-security/2021/01/14/1

16 Apr 2026 04:43Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

CVSS 3.15.9

EPSS0.22852

security vulnerability tomcat packages ntfs file system