PT-2026-122416

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring Certificate Revocation List CRLs for a FFM based connector. If an FFM connector was configured with invalid CRLs, the invalid CRLs were ignored meaning invalid certificates could be accepted. This issue...