PT-2026-31713 · Apache+2 · Apache Tomcat+2

Bartlomiej Dmitruk · Published 2026-04-02 · Updated 2026-05-22 · CVE-2026-34487

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.20, versions 10.1.0-M1 through 10.1.53, and versions 9.0.13 through 9.0.116

Description An issue exists in the cloud membership for clustering component of Apache Tomcat that allows for the insertion of sensitive information into log files, specifically exposing the Kubernetes bearer token.

Recommendations Upgrade to version 11.0.21 Upgrade to version 10.1.54 Upgrade to version 9.0.117

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2026-07147

BIT-TOMCAT-2026-34487

CLEANSTART-2026-IS05941

CVE-2026-34487

GHSA-X4M4-345F-5H5G

MGASA-2026-0095

OESA-2026-1970

OPENSUSE-SU-2026:10547-1

OPENSUSE-SU-2026:10548-1

OPENSUSE-SU-2026:10549-1

OPENSUSE-SU-2026:20595-1

OPENSUSE-SU-2026:20611-1

OPENSUSE-SU-2026:20612-1

SUSE-SU-2026:1558-1

SUSE-SU-2026:1572-1

SUSE-SU-2026:1603-1

SUSE-SU-2026:1604-1

Affected Products

Apache Tomcat

Confluence

Red Os

References · 128

• https://osv.dev/vulnerability/openSUSE-SU-2026:20612-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24733 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34487 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20595-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-34487 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-29145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22735 · Security Note
• https://ubuntu.com/security/CVE-2026-34487 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5588 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34486 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10548-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1225 · Security Note
• https://bdu.fstec.ru/vul/2026-07147 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-4926 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:1603-1 · Vendor Advisory