Debian/tomcat9: critical 9.8
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HT
Action: Upgrade tomcat9 to 9.0.31-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.31-1 | - |
Fixed versions
| 9.0.31-1 |
Sources
published · modified · JSON