PT-2026-97298 · Apache · Apache Tomcat
CVSS v3.1
9.8
حرجة
| المتجه | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apache Tomcat versions 11.0.0-M14 through 11.0.25
Apache Tomcat versions 10.1.22 through 10.1.59
Apache Tomcat versions 9.0.92 through 9.0.121
Description
CLIENT CERT authentication does not fail as expected in certain scenarios when the soft fail option is disabled.
Recommendations
Upgrade to version 11.0.26.
Upgrade to version 10.1.60.
Upgrade to version 9.0.122.
إصلاح
Improper Authentication
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Apache Tomcat