Lucene search
0d90b409cb18BSERV-14130HistoryJun 09, 2023 - 1:54 a.m.
Apache Tomcat CVE-2023-28709
2023-06-0901:54:09
0d90b409cb18
jira.atlassian.com
175
apache tomcat
bitbucket
upgrade
vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.007 Low
EPSS
Percentile
79.9%
h3. Issue summary
Apache Tomcat should be upgraded to 9.0.74 or a later version to fix [CVE-2023-28709|https://nvd.nist.gov/vuln/detail/CVE-2023-28709]
h3. Environment
- Bitbucket 8.10.x and 8.11
h3. Steps to Reproduce
- Check the Apache Tomcat version on {{pom.xml}}
h3. Expected Results
- Bitbucket 8.10 and 8.11: apache-tomcat 9.0.74 and later
h3. Actual Results
- Bitbucket 8.10: apache-tomcat-9.0.73 and earlier
- Bitbucket 8.11: apache-tomcat-9.0.73 and earlier
Affected configurations
Node
atlassianbitbucket_data_centerRange≤7.17.18
ORatlassianbitbucket_data_centerRange≤7.21.7
ORatlassianbitbucket_data_centerRange≤8.10.0
ORatlassianbitbucket_data_centerRange≤8.11.0
ORatlassianbitbucket_data_centerRange<7.17.19
ORatlassianbitbucket_data_centerRange<7.21.15
ORatlassianbitbucket_data_centerRange<8.8.7
ORatlassianbitbucket_data_centerRange<8.9.4
ORatlassianbitbucket_data_centerRange<8.10.4
ORatlassianbitbucket_data_centerRange<8.11.3
ORatlassianbitbucket_data_centerRange<8.12.1
ORatlassianbitbucket_data_centerRange<8.13.0
Related
nessus
nessus
Apache Tomcat 11.0.0.M2 < 11.0.0.M5 DoS
2023-05-24 00:00:00
Amazon Linux 2 : tomcat (ALAS-2024-2517)
2024-04-18 00:00:00
kaspersky
kaspersky
KLA49274 DoS vulnerability in Apache Tomcat
2023-04-19 00:00:00
KLA49273 DoS vulnerability in Apache Tomcat
2023-04-18 00:00:00
cnvd
cnvd
Apache Tomcat Denial of Service Vulnerability (CNVD-2023-42970)
2023-05-28 00:00:00
cgr
cgr
CVE-2023-28709 vulnerabilities
2024-04-30 09:06:13
veracode
veracode
Denial Of Service (DoS)
2023-05-24 05:01:05
amazon
amazon
Important: tomcat8
2023-07-05 21:44:00
Important: tomcat
2024-04-11 01:07:00
ubuntucve
ubuntucve
CVE-2023-28709
2023-05-22 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0411
2023-06-16 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0030
2023-06-16 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0599
2023-06-17 00:00:00
atlassian
atlassian
Third-Party Dependency Vulnerability in Confluence
2023-07-13 10:00:53
Upgrade Tomcat to fix CVE-2023-34981
2023-06-26 07:32:46
tomcat
tomcat
Fixed in Apache Tomcat 9.0.74
2023-04-18 00:00:00
Fixed in Apache Tomcat 11.0.0-M5
2023-04-19 00:00:00
Fixed in Apache Tomcat 10.1.8
2023-04-19 00:00:00
github
github
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
2023-07-06 21:14:59
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0191)
2023-06-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2505-1)
2023-06-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2504-1)
2023-06-14 00:00:00
cvelist
cvelist
CVE-2023-28709 Apache Tomcat: Fix for CVE-2023-24998 is incomplete
2023-05-22 10:08:49
nvd
nvd
CVE-2023-28709
2023-05-22 11:15:09
osv
osv
BIT-tomcat-2023-28709
2024-03-06 11:08:45
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
2023-07-06 21:14:59
CVE-2023-28709
2023-05-22 11:15:09
redhatcve
redhatcve
CVE-2023-28709
2023-05-26 17:11:03
ibm
ibm
cve
cve
CVE-2023-28709
2023-05-22 11:15:09
debiancve
debiancve
CVE-2023-28709
2023-05-22 11:15:09
mageia
mageia
Updated tomcat packages fix security vulnerability
2023-05-31 09:41:32
f5
f5
K000135262 : Apache Tomcat vulnerability CVE-2023-28709
2023-06-29 00:00:00
prion
prion
Default credentials
2023-05-22 11:15:00
almalinux
almalinux
Moderate: tomcat security and bug fix update
2023-11-14 00:00:00
Moderate: tomcat security and bug fix update
2023-11-07 00:00:00
oraclelinux
oraclelinux
tomcat security and bug fix update
2023-11-11 00:00:00
tomcat security and bug fix update
2023-11-17 00:00:00
redhat
redhat
(RHSA-2023:7065) Moderate: tomcat security and bug fix update
2023-11-14 08:44:23
(RHSA-2023:6570) Moderate: tomcat security and bug fix update
2023-11-07 06:08:48
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2023-05-30 00:00:00
hivepro
hivepro
Critical Security Vulnerabilities Discovered in Atlassian Products
2023-09-27 10:22:43
debian
debian
[SECURITY] [DSA 5521-1] tomcat10 security update
2023-10-10 22:09:33
rosalinux
rosalinux
Advisory ROSA-SA-2024-2418
2024-05-14 08:49:00
thn
thn
High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server
2023-09-22 08:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.007 Low
EPSS
Percentile
79.9%
Related for BSERV-14130