ROS-20221103-06

Apache Tomcat application server vulnerability is related to incorrect implementation of read/write locking.
writes. Exploitation of the vulnerability could allow an attacker acting remotely to cause a concurrency error and force client connections to share an instance of Http11Processor.
parallelism error and force client connections to share an instance of Http11Processor, resulting in responses or portions of responses being received.
resulting in responses or portions of responses being received by the wrong client

Apache Tomcat application server vulnerability is related to a memory leak. Exploitation of the vulnerability could
allow an attacker acting remotely to cause a denial of service as a result of patching the
bug 63362

The Apache Tomcat application server vulnerability is related to flaws in the validation time, time of
usage when configuring session persistence using FileStore. Exploitation of the vulnerability could
allow an attacker to perform certain actions that result in bypassing security restrictions
and privilege escalation (executing code with Tomcat process privileges)