Debian/tomcat9: medium 6.5
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This
Action: Upgrade tomcat9 to 9.0.43-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.43-2 | - |
Fixed versions
| 9.0.43-2 |
Sources
published · modified · JSON