PT-2023-4472 · Apache+1 · Apache Tomcat+1

Hidenobu Hayashi + 1 · Publicado 2023-05-19 · Atualizado 2024-10-09 · CVE-2023-34981

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M5, 10.1.8, 9.0.74, and 8.5.88

Description A regression in the fix for bug 66512 in Apache Tomcat meant that, if a response did not include any HTTP headers, no AJP SEND HEADERS message would be sent for the response. This in turn meant that at least one AJP proxy (mod proxy ajp) would use the response headers from the previous request, leading to an information leak.

Recommendations For Apache Tomcat versions 11.0.0-M5, 10.1.8, 9.0.74, and 8.5.88, update to a version that includes the fix for bug 66591 to resolve the issue. As a temporary workaround, consider restricting the use of the AJP proxy (mod proxy ajp) until a patch is available. Avoid using the AJP protocol until the issue is resolved.

Correção

DoS

Information Disclosure

Incorrect Permission

Enumeração de Fraquezas

CWE-200

CWE-732

Identificadores relacionados

BDU:2023-04867

BIT-TOMCAT-2023-34981

CVE-2023-34981

GHSA-MPPV-79CH-VW6Q

Produtos afetados

Apache Tomcat

Red Os

Referências · 35

• https://github.com/apache/tomcat · Nota
• https://github.com/apache/tomcat/commit/f0742f47b98aca943097f7f88e0d1163f57527e3 · Nota
• https://github.com/apache/tomcat/commit/739c7381aed22b7636351caf885ddc519ab6b442 · Nota
• https://github.com/apache/tomcat/commit/2214c8030522aa9b2a367dfa5d9acff1a03666ae · Nota
• https://github.com/apache/tomcat/commit/2f0ca2378415f4cf0748f4bc8fa955f41f803fa5 · Nota
• https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz · Aviso do Fabricante
• https://bz.apache.org/bugzilla/show_bug.cgi?id=66591 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34981 · Nota
• https://tomcat.apache.org/security-11 · Nota
• https://tomcat.apache.org/security-8 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-34981 · Aviso do Fabricante
• https://tomcat.apache.org/security-9 · Nota
• https://tomcat.apache.org/security-8.html · Nota
• https://security.netapp.com/advisory/ntap-20230714-0003 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-34981 · Nota de Segurança