Vulnerabilitycritical
Apache Tomcat Vulnerability CVE-2024
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-12828 | Authenticated OS Command Injection RCE in Webmin | 8.8 | 33% | ||
| CVE-2024-50379 | TOCTOU Race Condition in Apache Tomcat JSP Compilation Enables RCE | 9.8 | 44% | ||
| CVE-2024-56337 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat | 9.8 | 9% |
From the original article
2 min read at thehackernews.com
The Apache Software Foundation (ASF) has released a security update to address an important vulnerability in its Tomcat server software that could result in remote code execution (RCE) under certain conditions. The vulnerability, tracked as CVE-2024-56337 , has been described as an incomplete mitigation for CVE-2024-50379 (CVSS score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.