PT-2018-2982 · Apache +7 · Apache Tomcat +7

🗓️ 26 Jun 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Apache Tomcat TLS hostname verification for the WebSocket client is missing and should be enabled.

Reporter	Title	Published	Views	Family All 8087
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2016-3092)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Mar 202503:41	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in HTTP/2 protocol used by Netty on IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-44487)	5 Apr 202415:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-30640	25 Jan 202207:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in WebSphere Application Server Liberty may affect IBM Robotic Process Automation and result in a denial of service (CVE-2023-24998).	20 Jun 202314:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple IBM Websphere Application Server (WAS) vulnerabilities (CVE-2016-3092, CVE-2016-5986, CVE-2016-5983 )	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Apache Tomcat affect IBM Rational License Key Server Administration and Reporting Tool	17 Jun 201805:23	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat Vulnerabilities affect Algo One - Core	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to issues in Eclipse (CVE-2023-4218, CVE-2023-44487)	29 Feb 202421:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Tomcat affects App Connect Professional.	14 Dec 202111:38	–	ibm

Source	Link
github	www.github.com/Pa55w0rd/CVE-2018-1305
github	www.github.com/knqyf263/CVE-2018-1304
cve	www.cve.org/CVERecord
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2018-8034
linux	www.linux.oracle.com/errata/ELSA-2019-2205.html
security-tracker	www.security-tracker.debian.org/tracker/DSA-4281-1
ubuntu	www.ubuntu.com/security/CVE-2018-1336
osv	www.osv.dev/vulnerability/SUSE-SU-2018:3011-1
osv	www.osv.dev/vulnerability/RLSA-2019:1529
bdu	www.bdu.fstec.ru/vul/2019-03108

21 Oct 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 27.8

CVSS 39.8

CVSS 3.19.8

EPSS0.99999

SSVC