Debian/tomcat9: medium 6.5
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This
Action: Upgrade tomcat9 to 9.0.43-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.43-2 | - |
Fixed versions
| 9.0.43-2 |
Sources
- osv: DEBIAN-CVE-2021-30640#Debian:13/tomcat9
- https://security-tracker.debian.org/tracker/CVE-2021-30640
published · modified · JSON