PT-2021-2443

🗓️ 02 Feb 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 26 Views

Vulnerability in Apache Tomcat could expose user data due to HTTP/2 protocol implementation flaws

Reporter	Title	Published	Views	Family All 430
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	27 Jul 202116:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-24549) affects Power HMC	16 Apr 202416:53	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat is vulnerable to CVE-2024-24549 and CVE-2024-23672 used in IBM Maximo Application Suite - Monitor Component	2 May 202419:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	5 May 202105:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by denial of service vulnerabilities (CVE-2024-24549, CVE-2024-23672, CVE-2024-0727, CVE-2023-6129)	29 Aug 202415:33	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by Apache Tomcat vulnerabilities.	6 Apr 202114:10	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-25329
bdu	www.bdu.fstec.ru/vul/2021-01807
bugzilla	www.bugzilla.suse.com/1216182
suse	www.suse.com/security/cve/CVE-2018-11784
suse	www.suse.com/security/cve/CVE-2023-28709
osv	www.osv.dev/vulnerability/SUSE-SU-2021:0988-1
suse	www.suse.com/security/cve/CVE-2015-5174
lists	www.lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/rcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b@%3Cusers.tomcat.apache.org%3E
suse	www.suse.com/security/cve/CVE-2021-25329

08 Oct 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.5

CVSS 25

EPSS0.23072

SSVC

apache tomcat http/2 protocol user data exposure confidentiality issues integrity risks update recommendations