Debian/tomcat9: critical 9.8
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HT
Action: Upgrade tomcat9 to 9.0.31-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.31-1 | - |
Fixed versions
| 9.0.31-1 |
Sources
- osv: DEBIAN-CVE-2020-1938#Debian:13/tomcat9
- https://security-tracker.debian.org/tracker/CVE-2020-1938
published · modified · JSON