PT-2026-31711 · Apache+2 · Apache Tomcat+2

Bartlomiej Dmitruk · Publicado 2026-04-02 · Atualizado 2026-05-22 · CVE-2026-34483

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versões 11.0.0-M1 até 11.0.20, 10.1.0-M1 até 10.1.53, e 9.0.40 até 9.0.116

Description Uma falha existe dentro do componente JsonAccessLogValve do Apache Tomcat relacionada ao tratamento inadequado de codificação ou escape de saída.

Recommendations Atualize para a versão 11.0.21 Atualize para a versão 10.1.54 Atualize para a versão 9.0.117

Correção

DoS

Improper Encoding or Escaping of Output

Enumeração de Fraquezas

CWE-116

Identificadores relacionados

BDU:2026-07145

BIT-TOMCAT-2026-34483

CLEANSTART-2026-IS05941

CVE-2026-34483

GHSA-RV64-5GF8-9QQ8

MGASA-2026-0095

OESA-2026-1970

OPENSUSE-SU-2026:10547-1

OPENSUSE-SU-2026:10548-1

OPENSUSE-SU-2026:10549-1

OPENSUSE-SU-2026:20595-1

OPENSUSE-SU-2026:20611-1

OPENSUSE-SU-2026:20612-1

RHSA-2026:20405

SUSE-SU-2026:1558-1

SUSE-SU-2026:1572-1

SUSE-SU-2026:1603-1

SUSE-SU-2026:1604-1

Produtos afetados

Apache Tomcat

Confluence

Red Os

Referências · 127

• https://github.com/apache/tomcat · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IS05941.json · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483 · Nota
• https://advisories.mageia.org/MGASA-2026-0095.html · Nota de Segurança
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-tomcat-cve-2026-34483-8.0 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34483 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-07145 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2026:1572-1 · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2026/04/09/28 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20261558-1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-34500 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-25854 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-5588 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-22735 · Nota
• https://bugzilla.suse.com/1261855 · Nota