Tomcat APR sockets still exposed by TOCTOU after earlier fix
An unauthorised local user can reach the APR/Native Unix domain socket on Tomcat 9.0.47 through 9.0.122.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
An unauthorised local user can reach the APR/Native Unix domain socket on Tomcat 9.0.47 through 9.0.122.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views