Korean
<< Back
VID 22887
Severity 40
Port 80, ...
Protocol TCP
Class WWW
Detailed Description The version of Apache Tomcat installed on the remote host is 9.0.0.M18 and earlier. It is, therefore, affected by Denial of Service and Information Leak vulnerabilities.

* References:
http://tomcat.apache.org/security-9.html

* Platforms Affected:
Apache Tomcat Server 9.0.0.M18 and earlier
Any operating system Any version
Recommendation Upgrade to the latest version of Apache Tomcat Server (9.0.0.M19 or later), available from the Apache Software Foundation download site, http://tomcat.apache.org/
Related URL CVE-2017-5647,CVE-2017-5648,CVE-2017-5650 (CVE)
Related URL (SecurityFocus)
Related URL (ISS)