DeutschShown in its original language — a full translation is planned for a future version.
Apache Tomcat: Mehrere Schwachstellen
view advisory published 2021-03-01
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um Informationen offenzulegen oder beliebigen Programmcode auszuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25329US | high7.0 | — | ||
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that… | ||||
| CVE-2021-25122US | high7.5 | — | ||
When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amo… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:2561 vom 2021-06-29external
- Red Hat Security Advisory RHSA-2021:2562 vom 2021-06-29external
- Red Hat Security Advisory RHSA-2021:3425 vom 2021-09-09external
- Amazon Linux Security Advisory ALASTOMCAT8.5-2023-009 vom 2023-09-27external
- Amazon Linux Security Advisory ALAS-2021-1491 vom 2021-03-25external
- Amazon Linux Security Advisory ALAS-2021-1493 vom 2021-04-07external
- Atlassian Security Advisory CONFSERVER-62837 vom 2021-03-29external
- Apache Security Mailinglist vom 2021-03-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan