Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-25762
HistoryMay 13, 2022 - 12:00 a.m.

CVE-2022-25762

2022-05-1300:00:00
ubuntu.com
ubuntu.com
21

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.3%

JSON

If a web application sends a WebSocket message concurrently with the
WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75
or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application
will continue to use the socket after it has been closed. The error
handling triggered in this case could cause the a pooled object to be
placed in the pool twice. This could result in subsequent connections using
the same object concurrently which could result in data being returned to
the wrong use and/or other errors.

Related

osv 4
tomcat 2
redhatcve 1
cve 1
cnvd 1
github 1
debiancve 1
veracode 1
nessus 10
ibm 7
prion 1
f5 1
amazon 1
rosalinux 1
redhat 1
rocky 1
oracle 1
osv
osv
CVE-2022-25762
2022-05-13 08:15:06
BIT-tomcat-2022-25762
2024-03-06 11:09:31
Improper socket reuse in Apache Tomcat
2022-05-14 00:01:50
tomcat
tomcat
Fixed in Apache Tomcat 9.0.21
2019-06-07 00:00:00
Fixed in Apache Tomcat 8.5.76
2022-02-28 00:00:00
redhatcve
redhatcve
CVE-2022-25762
2022-05-13 00:41:04
cve
cve
CVE-2022-25762
2022-05-13 08:15:00
cnvd
cnvd
Apache Tomcat Request Obfuscation Vulnerability
2022-05-17 00:00:00
github
github
Improper socket reuse in Apache Tomcat
2022-05-14 00:01:50
debiancve
debiancve
CVE-2022-25762
2022-05-13 08:15:00
veracode
veracode
Command Injection
2022-09-05 19:23:03
nessus
nessus
Apache Tomcat 9.0.0.M1 < 9.0.21 vulnerability
2022-05-13 00:00:00
Apache Tomcat 8.5.0 < 8.5.76 vulnerability
2022-05-13 00:00:00
Amazon Linux AMI : tomcat8 (ALAS-2022-1627)
2022-08-05 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
2023-03-29 01:48:02
Security Bulletin: IBM UrbanCode Release is vulnerable to a bypass of security restrictions due to use of Apache Tomcat (CVE-2022-25762).
2022-07-18 15:23:29
Security Bulletin: IBM UrbanCode Build is vulnerable to a bypass of security restrictions due to use of Apache Tomcat (CVE-2022-25762).
2022-07-18 15:29:10
prion
prion
Code injection
2022-05-13 08:15:00
f5
f5
K49622415 : Apache Tomcat vulnerability CVE-2022-25762
2022-07-07 00:00:00
amazon
amazon
Important: tomcat8
2022-07-28 20:39:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
redhat
redhat
(RHSA-2020:4847) Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-11-03 12:29:58
rocky
rocky
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-11-03 12:29:58
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.3%

JSON
Related for UB:CVE-2022-25762
osv4tomcat2redhatcve1cve1cnvd1github1debiancve1veracode1nessus10ibm7prion1f51amazon1rosalinux1redhat1rocky1oracle1