Read the docs
TI-2024-14650 Aliases CVE-2024-22029GHSA-w8vw-x82m-vg68

tomcat packaging allows for escalation to root from tomcat user

Priority LOW 35CWE-732Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00182 7th percentileScored 2026-11-07
Fix Fixed Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 (SUSE): 9.0.85-150200.57.1SUSE Enterprise Storage 7.1 (SUSE): 9.0.85-150200.57.1+21 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSEContainer suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Enterprise Storage 7.1? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP2-LTSS? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP3-LTSS? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Web and Scripting 15 SP5? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP6? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Web and Scripting 15 SP6? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP2-LTSS? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP3-LTSS? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP2? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP3? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSESUSE Manager Server 4.3? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSEopenSUSE Leap 15.5? to before 9.0.85-150200.57.19.0.85-150200.57.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 9.0.85-3.19.0.85-3.1Patch availableCNA
  • Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Enterprise Storage 7.1 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Module for Web and Scripting 15 SP5 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP6 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Module for Web and Scripting 15 SP6 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP2-LTSS VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP3-LTSS VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP2 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP3 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • SUSE Manager Server 4.3 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • openSUSE Leap 15.5 VendorSUSE Affected ? to before 9.0.85-150200.57.1 Fixed in 9.0.85-150200.57.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 9.0.85-3.1 Fixed in 9.0.85-3.1 Patch available CNA

Remediation

  • Fix · CNA Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Enterprise Storage 7.1 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Module for Web and Scripting 15 SP5 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP6 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Module for Web and Scripting 15 SP6 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP2-LTSS (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP3-LTSS (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP2 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP3 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA SUSE Manager Server 4.3 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA openSUSE Leap 15.5 (SUSE) Fixed in 9.0.85-150200.57.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 9.0.85-3.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 5 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-22029
  2. 2026-10-03 Alias added: GHSA-w8vw-x82m-vg68

References

Other 1

  • TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences