PT-2026-81877
CVE-2026-65183
·
تاريخ النشر
2026-08-20
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache Tomcat versions 11.0.0-M1 through 11.0.24
Apache Tomcat versions 10.1.0-M1 through 10.1.57
Apache Tomcat versions 9.0.42 through 9.0.120
Description
A Time-of-check Time-of-use (TOCTOU) Race Condition occurs when creating unix domain sockets, which allows an unauthorized local user to access the socket. A TOCTOU race condition is a software bug where a program checks the state of a resource before using it, but the state changes between the check and the use.
Recommendations
Upgrade to version 11.0.25
Upgrade to version 10.1.58
Upgrade to version 9.0.121
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾