Debian/tomcat9: medium 6.5
Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint. This
Action: Upgrade tomcat9 to 9.0.70-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.70-2 | - |
Fixed versions
| 9.0.70-2 |
Sources
- osv: DEBIAN-CVE-2026-55956#Debian:14/tomcat9
- https://security-tracker.debian.org/tracker/CVE-2026-55956
published · modified · JSON