Red Hat Security Advisory

RHSA-2025:1920

pki-servlet-engine security update

Released 2025-02-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) pki-servlet-4.0-api-1:9.0.50-1.el9_2.2, pki-servlet-engine-1:9.0.50-1.el9_2.2

Fixes 1 record

TI-2024-33814 CVE-2024-50379 · GHSA-5j33-cvvr-w245

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

HIGH 82

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configura…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.31824 Published 2024-12-17 Partial fix · 11.0.2, 10.1.34 +1 CWE-367