If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tomcat8 | Aug 5, 2022 | May 13, 2022 |
| Apache Tomcat | — | Upgrade Apache Tomcat to the latest available versionUpgrade Apache Tomcat to 9.0.21Upgrade Apache Tomcat to 8.5.76 | May 13, 2022 | May 13, 2022 |
| Centos_linux | — | Upgrade pki-serverUpgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade tomcatjssUpgrade apache-commons-langUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade pki-kraUpgrade python3-nss-debuginfoUpgrade jackson-annotationsUpgrade pki-toolsUpgrade xalan-j2Upgrade jss-debuginfoUpgrade slf4jUpgrade javassistUpgrade resteasyUpgrade javassist-javadocUpgrade xsomUpgrade apache-commons-netUpgrade jakarta-commons-httpclientUpgrade jackson-coreUpgrade jss-debugsourceUpgrade jss-javadocUpgrade glassfish-fastinfosetUpgrade pki-base-javaUpgrade python-nss-debugsourceUpgrade pki-core-debuginfoUpgrade relaxngDatatypeUpgrade xml-commons-apisUpgrade apache-commons-collectionsUpgrade python-nss-docUpgrade bea-stax-apiUpgrade ldapjdkUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-coreUpgrade xml-commons-resolverUpgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade stax-exUpgrade pki-servlet-engineUpgrade pki-baseUpgrade ldapjdk-javadocUpgrade jssUpgrade xerces-j2Upgrade python3-pkiUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade xmlstreambufferUpgrade slf4j-jdk14Upgrade velocityUpgrade python3-nssUpgrade pki-tools-debuginfoUpgrade pki-symkeyUpgrade jackson-databindUpgrade glassfish-jaxb-runtime | Aug 24, 2022 | May 13, 2022 |
| Debian | — | Upgrade tomcat9 | Jul 30, 2024 | May 13, 2022 |
| Redhat_linux | — | Upgrade pki-servlet-4.0-apiUpgrade xsomUpgrade pki-core-debugsourceUpgrade pki-toolsUpgrade python3-nssUpgrade pki-kraUpgrade stax-exUpgrade python-nss-docUpgrade xml-commons-resolverNo solution existsUpgrade apache-commons-collectionsUpgrade pki-symkeyUpgrade jss-debuginfoUpgrade jackson-coreUpgrade glassfish-jaxb-runtimeUpgrade pki-baseUpgrade jssUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade velocityUpgrade slf4j-jdk14Upgrade pki-caUpgrade pki-core-debuginfoUpgrade jackson-jaxrs-providersUpgrade ldapjdkUpgrade pki-symkey-debuginfoUpgrade tomcatjssUpgrade jackson-module-jaxb-annotationsUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-txw2Upgrade relaxngDatatypeUpgrade resteasyUpgrade xml-commons-apisUpgrade xerces-j2Upgrade apache-commons-netUpgrade xmlstreambufferUpgrade bea-stax-apiUpgrade jackson-jaxrs-json-providerUpgrade javassist-javadocUpgrade xalan-j2Upgrade jakarta-commons-httpclientUpgrade pki-tools-debuginfoUpgrade jss-javadocUpgrade python3-pkiUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-coreUpgrade pki-base-javaUpgrade jackson-databindUpgrade jss-debugsourceUpgrade jackson-annotationsUpgrade pki-serverUpgrade apache-commons-langUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade slf4jUpgrade javassist | Aug 24, 2022 | May 13, 2022 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python-nss-doc | Mar 12, 2024 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub