Lucene search
+L

6 matches found

osv_bit
osv_bit
•added 2026/09/11 5:58 a.m.•23 views

BIT-TOMCAT-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0 through 11.0.20, from 10.1.0 through 10.1.53, from 9.0.13 through 9.0.116. Users are...

7.5CVSS7.2AI score0.00447EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/05/26 12:59 p.m.•47 views

Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...

7.5CVSS7AI score0.00447EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/09 7:36 p.m.•63 views

CVE-2026-34487

The Apache Tomcat cloud membership for clustering component suffers from an Insertion of Sensitive Information into Log File vulnerability. This flaw causes the application to expose Kubernetes bearer tokens within its log messages. This issue impacts the following versions: 11.0.0-M1 through 11....

7.5CVSS7.2AI score0.00447EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2026/04/09 7:36 p.m.•12 views

CVE-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116. User...

7.5CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/09 7:36 p.m.•10 views

CVE-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116. User...

7.2AI score0.00447EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•21 views

PT-2026-31713

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.20, versions 10.1.0-M1 through 10.1.53, and versions 9.0.13 through 9.0.116 Description An issue exists in the cloud membership for clustering component of Apache Tomcat that allows for the inserti...

7.8CVSS7.1AI score0.00447EPSS
SaveExploits0References189
Rows per page
Query Builder