Debian/tomcat10: medium 6.5
Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint. This
Action: Upgrade tomcat10 to 10.1.60-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.1.60-1 | - |
Fixed versions
| 10.1.60-1 |
Sources
- osv: DEBIAN-CVE-2026-55956#Debian:14/tomcat10
- https://security-tracker.debian.org/tracker/CVE-2026-55956
published · modified · JSON