Red Hat Security Advisory

RHSA-2024:0539

tomcat security update

Released 2024-01-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) tomcat-1:9.0.62-27.el8_9.3, tomcat-admin-webapps-1:9.0.62-27.el8_9.3, tomcat-docs-webapp-1:9.0.62-27.el8_9.3 +5

Fixes 1 record

TI-2023-25099 CVE-2023-46589 · GHSA-fccv-jmmp-qg76

Apache Tomcat: HTTP request smuggling via malformed trailer headers

MEDIUM 44

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP t…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02651 Published 2023-11-28 Partial fix · 11.0.0-M11, 10.1.16 +2 CWE-444