Lucene search
+L

6 matches found

OSV
OSV
•added 2026/09/11 5:58 a.m.•17 views

BIT-TOMCAT-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0 through 11.0.20, from 10.1.0 through 10.1.53, from 9.0.13 through 9.0.116. Users are...

7.5CVSS5.8AI score0.00622EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/05/26 12:59 p.m.•42 views

Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...

5.7AI score0.00622EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/09 7:36 p.m.•7 views

CVE-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116. User...

5.8AI score0.00622EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/09 7:36 p.m.•53 views

CVE-2026-34487

The Apache Tomcat cloud membership for clustering component suffers from an Insertion of Sensitive Information into Log File vulnerability. This flaw causes the application to expose Kubernetes bearer tokens within its log messages. This issue impacts the following versions: 11.0.0-M1 through 11....

7.5CVSS5.8AI score0.00622EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/04/09 7:36 p.m.•10 views

CVE-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116. User...

7.5CVSS5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•20 views

PT-2026-31713

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.20, versions 10.1.0-M1 through 10.1.53, and versions 9.0.13 through 9.0.116 Description An issue exists in the cloud membership for clustering component of Apache Tomcat that allows for the inserti...

8.7CVSS5.7AI score0.06561EPSS
SaveExploits9References153
Rows per page
Query Builder