Apache Tomcat Race Condition vulnerability

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not...

PT-2018-3242

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 8.5.5 through 8.5.31 Apache Tomcat versions 9.0.0.M9 through 9.0.9 Description The issue is caused by synchronization errors when using a shared resource, which could allow a remote attacker to disclose protected...