DeutschShown in its original language — a full translation is planned for a future version.
Apache Tomcat: Mehrere Schwachstellen
view advisory published 2021-07-12
Ein lokaler oder entfernter Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33037US | medium5.3 | — | ||
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the pos… | ||||
| CVE-2021-30640US | medium6.5 | — | ||
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the… | ||||
| CVE-2021-30639US | high7.5 | — | ||
A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I… | ||||
02
references
External citations — patches, advisories, analysis.
- AUSCERT Security Bulletin: ESB-2021.2359 vom 2021-07-12external
- Red Hat Security Advisory RHSA-2021:4861 vom 2021-11-30external
- Red Hat Security Advisory RHSA-2021:4863 vom 2021-11-30external
- Red Hat Security Advisory RHSA-2022:1179 vom 2022-04-13external
- Amazon Linux Security Advisory ALASTOMCAT8.5-2023-007 vom 2023-09-27external
- Amazon Linux Security Advisory ALASTOMCAT9-2023-007 vom 2023-09-27external
- Amazon Linux Security Advisory ALAS-2021-1534 vom 2021-09-08external
- Amazon Linux Security Advisory ALAS-2021-1535 vom 2021-09-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan