KLA50474 OSI vulnerability in Apache Tomcat

An information disclosure vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

Fixed in Apache Tomcat 10.1.9

Fixed in Apache Tomcat 8.5.89

Related products

Apache-Tomcat

CVE list

CVE-2023-34981 critical

Solution

Update to the latest versionTomcat 10.1 Software Downloads

Tomcat 8.5 Software Downloads

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Apache Tomcat 8.5.x earlier than 8.5.89Apache Tomcat 10.1.x earlier than 10.1.9