PT-2023-4472 · Apache+1 · Apache Tomcat+1

Hidenobu Hayashi + 1 · Published 2023-05-19 · Updated 2024-10-09 · CVE-2023-34981

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M5, 10.1.8, 9.0.74, and 8.5.88

Description A regression in the fix for bug 66512 in Apache Tomcat meant that, if a response did not include any HTTP headers, no AJP SEND HEADERS message would be sent for the response. This in turn meant that at least one AJP proxy (mod proxy ajp) would use the response headers from the previous request, leading to an information leak.

Recommendations For Apache Tomcat versions 11.0.0-M5, 10.1.8, 9.0.74, and 8.5.88, update to a version that includes the fix for bug 66591 to resolve the issue. As a temporary workaround, consider restricting the use of the AJP proxy (mod proxy ajp) until a patch is available. Avoid using the AJP protocol until the issue is resolved.

Fix

Incorrect Permission

Information Disclosure

Weakness Enumeration

CWE-732

CWE-200

Related Identifiers

BDU:2023-04867

BIT-TOMCAT-2023-34981

CVE-2023-34981

GHSA-MPPV-79CH-VW6Q

Affected Products

Apache Tomcat

Red Os

References · 35

• https://nvd.nist.gov/vuln/detail/CVE-2023-34981 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-34981 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34981 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04867 · Security Note
• https://ubuntu.com/security/CVE-2023-34981 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-34981 · Vendor Advisory
• https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-34981 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mppv-79ch-vw6q · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-34981 · Security Note
• https://osv.dev/vulnerability/BIT-tomcat-2023-34981 · Vendor Advisory
• https://github.com/apache/tomcat · Note
• https://github.com/apache/tomcat/commit/2214c8030522aa9b2a367dfa5d9acff1a03666ae · Note
• https://github.com/apache/tomcat/commit/739c7381aed22b7636351caf885ddc519ab6b442 · Note