Lucene search
+L

Time-of-check Time-of-use (TOCTOU) Race Condition

🗓️ 20 Dec 2024 08:10:22Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 19 Views

Apache Tomcat is vulnerable to a Time-of-check Time-of-use Race Condition allowing file system manipulation.

Related
Detection
Refs
Vulners
Node
OR
AND
tomcat9tomcat9Match9.0.40-1debian
AND
tomcat9tomcat9Match9.0.43-1debian
OR
apachetomcat-catalinaRange9.0.0.M19.0.97java
apachetomcat-catalinaRange10.1.0-M110.1.33java
apachetomcat-catalinaRange11.0.0-M111.0.1java
apachetomcat-catalinaMatch11.0.0java
apachetomcat-catalinaMatch11.0.0-m1java
apachetomcat-catalinaMatch11.0.0-m10java
apachetomcat-catalinaMatch11.0.0-m11java
apachetomcat-catalinaMatch11.0.0-m12java
apachetomcat-catalinaMatch11.0.0-m13java
apachetomcat-catalinaMatch11.0.0-m14java
apachetomcat-catalinaMatch11.0.0-m15java
apachetomcat-catalinaMatch11.0.0-m16java
apachetomcat-catalinaMatch11.0.0-m17java
apachetomcat-catalinaMatch11.0.0-m18java
apachetomcat-catalinaMatch11.0.0-m19java
apachetomcat-catalinaMatch11.0.0-m20java
apachetomcat-catalinaMatch11.0.0-m21java
apachetomcat-catalinaMatch11.0.0-m22java
apachetomcat-catalinaMatch11.0.0-m24java
apachetomcat-catalinaMatch11.0.0-m25java
apachetomcat-catalinaMatch11.0.0-m26java
apachetomcat-catalinaMatch11.0.0-m3java
apachetomcat-catalinaMatch11.0.0-m4java
apachetomcat-catalinaMatch11.0.0-m5java
apachetomcat-catalinaMatch11.0.0-m6java
apachetomcat-catalinaMatch11.0.0-m7java
apachetomcat-catalinaMatch11.0.0-m9java
apachetomcat-catalinaMatch10.1.0java
apachetomcat-catalinaMatch10.1.0-m1java
apachetomcat-catalinaMatch10.1.0-m10java
apachetomcat-catalinaMatch10.1.0-m11java
apachetomcat-catalinaMatch10.1.0-m12java
apachetomcat-catalinaMatch10.1.0-m14java
apachetomcat-catalinaMatch10.1.0-m15java
apachetomcat-catalinaMatch10.1.0-m16java
apachetomcat-catalinaMatch10.1.0-m17java
apachetomcat-catalinaMatch10.1.0-m2java
apachetomcat-catalinaMatch10.1.0-m4java
apachetomcat-catalinaMatch10.1.0-m5java
apachetomcat-catalinaMatch10.1.0-m6java
apachetomcat-catalinaMatch10.1.0-m7java
apachetomcat-catalinaMatch10.1.0-m8java
apachetomcat-catalinaMatch10.1.1java
apachetomcat-catalinaMatch10.1.10java
apachetomcat-catalinaMatch10.1.11java
apachetomcat-catalinaMatch10.1.12java
apachetomcat-catalinaMatch10.1.13java
apachetomcat-catalinaMatch10.1.14java
apachetomcat-catalinaMatch10.1.15java
apachetomcat-catalinaMatch10.1.16java
apachetomcat-catalinaMatch10.1.17java
apachetomcat-catalinaMatch10.1.18java
apachetomcat-catalinaMatch10.1.19java
apachetomcat-catalinaMatch10.1.2java
apachetomcat-catalinaMatch10.1.20java
apachetomcat-catalinaMatch10.1.23java
apachetomcat-catalinaMatch10.1.24java
apachetomcat-catalinaMatch10.1.25java
apachetomcat-catalinaMatch10.1.26java
apachetomcat-catalinaMatch10.1.28java
apachetomcat-catalinaMatch10.1.29java
apachetomcat-catalinaMatch10.1.30java
apachetomcat-catalinaMatch10.1.31java
apachetomcat-catalinaMatch10.1.4java
apachetomcat-catalinaMatch10.1.5java
apachetomcat-catalinaMatch10.1.6java
apachetomcat-catalinaMatch10.1.7java
apachetomcat-catalinaMatch10.1.8java
apachetomcat-catalinaMatch10.1.9java
apachetomcat-catalinaMatch9.0.0.m1java
apachetomcat-catalinaMatch9.0.0.m10java
apachetomcat-catalinaMatch9.0.0.m11java
apachetomcat-catalinaMatch9.0.0.m13java
apachetomcat-catalinaMatch9.0.0.m15java
apachetomcat-catalinaMatch9.0.0.m17java
apachetomcat-catalinaMatch9.0.0.m18java
apachetomcat-catalinaMatch9.0.0.m19java
apachetomcat-catalinaMatch9.0.0.m20java
apachetomcat-catalinaMatch9.0.0.m21java
apachetomcat-catalinaMatch9.0.0.m22java
apachetomcat-catalinaMatch9.0.0.m25java
apachetomcat-catalinaMatch9.0.0.m26java
apachetomcat-catalinaMatch9.0.0.m27java
apachetomcat-catalinaMatch9.0.0.m3java
apachetomcat-catalinaMatch9.0.0.m4java
apachetomcat-catalinaMatch9.0.0.m6java
apachetomcat-catalinaMatch9.0.0.m8java
apachetomcat-catalinaMatch9.0.0.m9java
apachetomcat-catalinaMatch9.0.1java
apachetomcat-catalinaMatch9.0.10java
apachetomcat-catalinaMatch9.0.11java
apachetomcat-catalinaMatch9.0.12java
apachetomcat-catalinaMatch9.0.13java
apachetomcat-catalinaMatch9.0.14java
apachetomcat-catalinaMatch9.0.16java
apachetomcat-catalinaMatch9.0.17java
apachetomcat-catalinaMatch9.0.19java
apachetomcat-catalinaMatch9.0.2java
apachetomcat-catalinaMatch9.0.20java
apachetomcat-catalinaMatch9.0.21java
apachetomcat-catalinaMatch9.0.22java
apachetomcat-catalinaMatch9.0.24java
apachetomcat-catalinaMatch9.0.26java
apachetomcat-catalinaMatch9.0.27java
apachetomcat-catalinaMatch9.0.29java
apachetomcat-catalinaMatch9.0.30java
apachetomcat-catalinaMatch9.0.31java
apachetomcat-catalinaMatch9.0.33java
apachetomcat-catalinaMatch9.0.34java
apachetomcat-catalinaMatch9.0.35java
apachetomcat-catalinaMatch9.0.36java
apachetomcat-catalinaMatch9.0.37java
apachetomcat-catalinaMatch9.0.38java
apachetomcat-catalinaMatch9.0.39java
apachetomcat-catalinaMatch9.0.4java
apachetomcat-catalinaMatch9.0.40java
apachetomcat-catalinaMatch9.0.41java
apachetomcat-catalinaMatch9.0.43java
apachetomcat-catalinaMatch9.0.44java
apachetomcat-catalinaMatch9.0.45java
apachetomcat-catalinaMatch9.0.46java
apachetomcat-catalinaMatch9.0.48java
apachetomcat-catalinaMatch9.0.5java
apachetomcat-catalinaMatch9.0.50java
apachetomcat-catalinaMatch9.0.52java
apachetomcat-catalinaMatch9.0.53java
apachetomcat-catalinaMatch9.0.54java
apachetomcat-catalinaMatch9.0.55java
apachetomcat-catalinaMatch9.0.56java
apachetomcat-catalinaMatch9.0.58java
apachetomcat-catalinaMatch9.0.59java
apachetomcat-catalinaMatch9.0.6java
apachetomcat-catalinaMatch9.0.60java
apachetomcat-catalinaMatch9.0.62java
apachetomcat-catalinaMatch9.0.63java
apachetomcat-catalinaMatch9.0.64java
apachetomcat-catalinaMatch9.0.65java
apachetomcat-catalinaMatch9.0.67java
apachetomcat-catalinaMatch9.0.68java
apachetomcat-catalinaMatch9.0.69java
apachetomcat-catalinaMatch9.0.7java
apachetomcat-catalinaMatch9.0.70java
apachetomcat-catalinaMatch9.0.71java
apachetomcat-catalinaMatch9.0.72java
apachetomcat-catalinaMatch9.0.73java
apachetomcat-catalinaMatch9.0.74java
apachetomcat-catalinaMatch9.0.75java
apachetomcat-catalinaMatch9.0.76java
apachetomcat-catalinaMatch9.0.78java
apachetomcat-catalinaMatch9.0.79java
apachetomcat-catalinaMatch9.0.8java
apachetomcat-catalinaMatch9.0.80java
apachetomcat-catalinaMatch9.0.81java
apachetomcat-catalinaMatch9.0.82java
apachetomcat-catalinaMatch9.0.83java
apachetomcat-catalinaMatch9.0.84java
apachetomcat-catalinaMatch9.0.85java
apachetomcat-catalinaMatch9.0.86java
apachetomcat-catalinaMatch9.0.87java
apachetomcat-catalinaMatch9.0.88java
apachetomcat-catalinaMatch9.0.89java
apachetomcat-catalinaMatch9.0.90java
apachetomcat-catalinaMatch9.0.91java
apachetomcat-catalinaMatch9.0.93java
apachetomcat-catalinaMatch9.0.94java
apachetomcat-catalinaMatch9.0.95java
apachetomcat-catalinaMatch9.0.96java
apachetomcat-catalinaMatch8.5.0java
apachetomcat-catalinaMatch8.5.100java
apachetomcat-catalinaMatch8.5.11java
apachetomcat-catalinaMatch8.5.12java
apachetomcat-catalinaMatch8.5.13java
apachetomcat-catalinaMatch8.5.14java
apachetomcat-catalinaMatch8.5.15java
apachetomcat-catalinaMatch8.5.16java
apachetomcat-catalinaMatch8.5.19java
apachetomcat-catalinaMatch8.5.2java
apachetomcat-catalinaMatch8.5.20java
apachetomcat-catalinaMatch8.5.21java
apachetomcat-catalinaMatch8.5.23java
apachetomcat-catalinaMatch8.5.24java
apachetomcat-catalinaMatch8.5.27java
apachetomcat-catalinaMatch8.5.28java
apachetomcat-catalinaMatch8.5.29java
apachetomcat-catalinaMatch8.5.3java
apachetomcat-catalinaMatch8.5.30java
apachetomcat-catalinaMatch8.5.31java
apachetomcat-catalinaMatch8.5.32java
apachetomcat-catalinaMatch8.5.33java
apachetomcat-catalinaMatch8.5.34java
apachetomcat-catalinaMatch8.5.35java
apachetomcat-catalinaMatch8.5.37java
apachetomcat-catalinaMatch8.5.38java
apachetomcat-catalinaMatch8.5.39java
apachetomcat-catalinaMatch8.5.4java
apachetomcat-catalinaMatch8.5.40java
apachetomcat-catalinaMatch8.5.41java
apachetomcat-catalinaMatch8.5.42java
apachetomcat-catalinaMatch8.5.43java
apachetomcat-catalinaMatch8.5.45java
apachetomcat-catalinaMatch8.5.46java
apachetomcat-catalinaMatch8.5.47java
apachetomcat-catalinaMatch8.5.49java
apachetomcat-catalinaMatch8.5.5java
apachetomcat-catalinaMatch8.5.50java
apachetomcat-catalinaMatch8.5.51java
apachetomcat-catalinaMatch8.5.53java
apachetomcat-catalinaMatch8.5.54java
apachetomcat-catalinaMatch8.5.55java
apachetomcat-catalinaMatch8.5.56java
apachetomcat-catalinaMatch8.5.57java
apachetomcat-catalinaMatch8.5.58java
apachetomcat-catalinaMatch8.5.59java
apachetomcat-catalinaMatch8.5.6java
apachetomcat-catalinaMatch8.5.60java
apachetomcat-catalinaMatch8.5.61java
apachetomcat-catalinaMatch8.5.63java
apachetomcat-catalinaMatch8.5.64java
apachetomcat-catalinaMatch8.5.65java
apachetomcat-catalinaMatch8.5.66java
apachetomcat-catalinaMatch8.5.68java
apachetomcat-catalinaMatch8.5.69java
apachetomcat-catalinaMatch8.5.70java
apachetomcat-catalinaMatch8.5.71java
apachetomcat-catalinaMatch8.5.72java
apachetomcat-catalinaMatch8.5.73java
apachetomcat-catalinaMatch8.5.75java
apachetomcat-catalinaMatch8.5.76java
apachetomcat-catalinaMatch8.5.77java
apachetomcat-catalinaMatch8.5.78java
apachetomcat-catalinaMatch8.5.79java
apachetomcat-catalinaMatch8.5.8java
apachetomcat-catalinaMatch8.5.81java
apachetomcat-catalinaMatch8.5.82java
apachetomcat-catalinaMatch8.5.83java
apachetomcat-catalinaMatch8.5.84java
apachetomcat-catalinaMatch8.5.85java
apachetomcat-catalinaMatch8.5.86java
apachetomcat-catalinaMatch8.5.87java
apachetomcat-catalinaMatch8.5.88java
apachetomcat-catalinaMatch8.5.89java
apachetomcat-catalinaMatch8.5.9java
apachetomcat-catalinaMatch8.5.90java
apachetomcat-catalinaMatch8.5.91java
apachetomcat-catalinaMatch8.5.92java
apachetomcat-catalinaMatch8.5.93java
apachetomcat-catalinaMatch8.5.94java
apachetomcat-catalinaMatch8.5.95java
apachetomcat-catalinaMatch8.5.96java
apachetomcat-catalinaMatch8.5.97java
apachetomcat-catalinaMatch8.5.98java
apachetomcat-catalinaMatch8.5.99java
apachetomcat-embed-coreRange9.0.0.M19.0.97java
apachetomcat-embed-coreRange10.1.0-M110.1.33java
apachetomcat-embed-coreRange11.0.0-M111.0.1java
apachetomcat-embed-coreMatch11.0.0-m1java
apachetomcat-embed-coreMatch11.0.0-m10java
apachetomcat-embed-coreMatch11.0.0-m11java
apachetomcat-embed-coreMatch11.0.0-m12java
apachetomcat-embed-coreMatch11.0.0-m13java
apachetomcat-embed-coreMatch11.0.0-m14java
apachetomcat-embed-coreMatch11.0.0-m15java
apachetomcat-embed-coreMatch11.0.0-m16java
apachetomcat-embed-coreMatch11.0.0-m17java
apachetomcat-embed-coreMatch11.0.0-m18java
apachetomcat-embed-coreMatch11.0.0-m19java
apachetomcat-embed-coreMatch11.0.0-m20java
apachetomcat-embed-coreMatch11.0.0-m21java
apachetomcat-embed-coreMatch11.0.0-m22java
apachetomcat-embed-coreMatch11.0.0-m24java
apachetomcat-embed-coreMatch11.0.0-m25java
apachetomcat-embed-coreMatch11.0.0-m26java
apachetomcat-embed-coreMatch11.0.0-m3java
apachetomcat-embed-coreMatch11.0.0-m4java
apachetomcat-embed-coreMatch11.0.0-m5java
apachetomcat-embed-coreMatch11.0.0-m6java
apachetomcat-embed-coreMatch11.0.0-m7java
apachetomcat-embed-coreMatch11.0.0-m9java
apachetomcat-embed-coreMatch10.1.0-m1java
apachetomcat-embed-coreMatch10.1.0-m10java
apachetomcat-embed-coreMatch10.1.0-m11java
apachetomcat-embed-coreMatch10.1.0-m12java
apachetomcat-embed-coreMatch10.1.0-m14java
apachetomcat-embed-coreMatch10.1.0-m15java
apachetomcat-embed-coreMatch10.1.0-m16java
apachetomcat-embed-coreMatch10.1.0-m17java
apachetomcat-embed-coreMatch10.1.0-m2java
apachetomcat-embed-coreMatch10.1.0-m4java
apachetomcat-embed-coreMatch10.1.0-m5java
apachetomcat-embed-coreMatch10.1.0-m6java
apachetomcat-embed-coreMatch10.1.0-m7java
apachetomcat-embed-coreMatch10.1.0-m8java
apachetomcat-embed-coreMatch10.1.10java
apachetomcat-embed-coreMatch10.1.11java
apachetomcat-embed-coreMatch10.1.12java
apachetomcat-embed-coreMatch10.1.13java
apachetomcat-embed-coreMatch10.1.14java
apachetomcat-embed-coreMatch10.1.15java
apachetomcat-embed-coreMatch10.1.16java
apachetomcat-embed-coreMatch10.1.17java
apachetomcat-embed-coreMatch10.1.18java
apachetomcat-embed-coreMatch10.1.19java
apachetomcat-embed-coreMatch10.1.20java
apachetomcat-embed-coreMatch10.1.23java
apachetomcat-embed-coreMatch10.1.24java
apachetomcat-embed-coreMatch10.1.25java
apachetomcat-embed-coreMatch10.1.26java
apachetomcat-embed-coreMatch10.1.28java
apachetomcat-embed-coreMatch10.1.29java
apachetomcat-embed-coreMatch10.1.30java
apachetomcat-embed-coreMatch10.1.31java
apachetomcat-embed-coreMatch9.0.0.m1java
apachetomcat-embed-coreMatch9.0.0.m10java
apachetomcat-embed-coreMatch9.0.0.m11java
apachetomcat-embed-coreMatch9.0.0.m13java
apachetomcat-embed-coreMatch9.0.0.m15java
apachetomcat-embed-coreMatch9.0.0.m17java
apachetomcat-embed-coreMatch9.0.0.m18java
apachetomcat-embed-coreMatch9.0.0.m19java
apachetomcat-embed-coreMatch9.0.0.m20java
apachetomcat-embed-coreMatch9.0.0.m21java
apachetomcat-embed-coreMatch9.0.0.m22java
apachetomcat-embed-coreMatch9.0.0.m25java
apachetomcat-embed-coreMatch9.0.0.m26java
apachetomcat-embed-coreMatch9.0.0.m27java
apachetomcat-embed-coreMatch9.0.0.m3java
apachetomcat-embed-coreMatch9.0.0.m4java
apachetomcat-embed-coreMatch9.0.0.m6java
apachetomcat-embed-coreMatch9.0.0.m8java
apachetomcat-embed-coreMatch9.0.0.m9java
apachetomcat-embed-coreMatch8.5.100java
apachetomcat-catalinaRange9.0.0.M19.0.97java
apachetomcat-catalinaRange10.1.0-M110.1.33java
apachetomcat-catalinaRange11.0.0-M111.0.1java
apachetomcat-embed-coreRange9.0.0.M19.0.97java
apachetomcat-embed-coreRange10.1.0-M110.1.33java
apachetomcat-embed-coreRange11.0.0-M111.0.1java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 04:29Current
7High risk
Vulners AI Score7
CVSS 3.19.8
EPSS0.44312
SSVC
19