Skip to main content

Apache Tomcat Information Disclosure Vulnerability

Release Date: 26 Jun 2023 3590 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

TYPE: Web Servers

A vulnerability has been identified in Apache Tomcat. A remote attacker could exploit this vulnerability to trigger sensitive information disclosure on the targeted system.


Impact

  • Information Disclosure

System / Technologies affected

  • Apache Tomcat 11.0.0-M5
  • Apache Tomcat 10.1.8
  • Apache Tomcat 9.0.74
  • Apache Tomcat 8.5.88

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

 

  • Apache Tomcat 11.0.0-M6 or later
  • Apache Tomcat 10.1.9 or later
  • Apache Tomcat 9.0.75 or later
  • Apache Tomcat 8.5.89 or later

Vulnerability Identifier


Source


Related Link