CVE-2024-21733

Katalog CVE

CVSS 5.3 · Medium EPSS 14,3%

Kerentanan Generation of Error Message Containing Sensitive Information pada apache tomcat. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.

Rincian

Terbit di NVD

19 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-209: Generation of Error Message Containing Sensitive Information

EPSS (30 hari)

14,3% peluang dieksploitasi; lebih tinggi dari 96,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/h9bjqdd0odj6lhs2o96qgowcc6hb0cfz mailing list · patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2024/01/19/2 mailing list · patch · advisory pihak ketiga
• http://packetstormsecurity.com/files/176951/Apache-Tomcat-8.5.63-9.0.43-HTTP-Response-Smuggling.html
• https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html
• https://security.netapp.com/advisory/ntap-20240216-0005/