PT-2023-6028

🗓️ 10 Oct 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 1 Views

DoS in Apache Tomcat via unclosed file streams filling disk space on Windows.

Reporter	Title	Published	Views	Family All 248
GithubExploit	Exploit for CVE-2020-1938	29 Nov 202508:31	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed	15 Nov 202313:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0 addresses multiple vulnerabilities.	4 Jan 202407:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat, Apache Commons FileUpload and Apache Axis might affect IBM Storage Copy Data Management	22 Mar 202416:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to HTTP request smuggling and a denial of service due to Apache Tomcat. (CVE-2023-46589, CVE-2023-42794)	3 Jan 202414:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Deploy (UCD) is susceptible to multiple Apache Tomcat vulnerabilities (CVE-2023-42794, CVE-2023-42795, CVE-2023-44487)	13 Dec 202321:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to multiple CVEs due to Apache Tomcat.	14 Nov 202311:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities	26 Mar 202503:58	–	ibm

Source	Link
bugzilla	www.bugzilla.suse.com/1217649
osv	www.osv.dev/vulnerability/CVE-2023-42794
suse	www.suse.com/support/update/announcement/2024/suse-su-20240472-1
osv	www.osv.dev/vulnerability/SUSE-SU-2024:0472-1
t	www.t.me/cvenotify/63188
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-tomcat-cve-2023-45648-cve-2023-42795-cve-2023-42794-cve-2023-46589
suse	www.suse.com/security/cve/CVE-2023-45648
access	www.access.redhat.com/errata/RHSA-2024:0474
suse	www.suse.com/security/cve/CVE-2023-46589
github	www.github.com/bcdannyboy/CVE-2023-44487

15 Jun 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.8

CVSS 3.15.3 - 5.9

EPSS0.0216

SSVC

Apache Tomcat Commons FileUpload denial of service Windows unclosed file stream