CVE-2023-34981

HIGH

Apache Tomcat < 11.0.0-M6 - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak.

References (2)

Core 2
Core References
Mailing List, Vendor Advisory vendor-advisory
https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz

Scores

CVSS v3 7.5
EPSS 0.0027
EPSS Percentile 50.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-732
Status published
Products (6)
apache/tomcat 8.5.88
apache/tomcat 9.0.74
apache/tomcat 10.1.8
apache/tomcat 11.0.0 milestone5
org.apache.tomcat/tomcat-coyote 8.5.88 - 8.5.89Maven
org.apache.tomcat.embed/tomcat-embed-core 11.0.0-M5 - 11.0.0-M6Maven
Published Jun 21, 2023
Tracked Since Feb 18, 2026