Lucene search

K
f5F5F5:K47096851
HistoryJun 15, 2022 - 12:00 a.m.

K47096851 : Apache Tomcat vulnerability CVE-2022-29885

2022-06-1500:00:00
my.f5.com
170

7.5 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

Security Advisory Description

The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks. (CVE-2022-29885)

Impact

There is no impact; F5 products are not affected by this vulnerability.