If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tomcat8 | Aug 5, 2022 | May 13, 2022 |
| Apache Tomcat | — | Upgrade Apache Tomcat to 8.5.76Upgrade Apache Tomcat to the latest available versionUpgrade Apache Tomcat to 9.0.21 | May 13, 2022 | May 13, 2022 |
| Centos_linux | — | Upgrade pki-base-javaUpgrade jakarta-commons-httpclientUpgrade pki-servlet-4.0-apiUpgrade pki-toolsUpgrade pki-kraUpgrade pki-serverUpgrade glassfish-jaxb-txw2Upgrade jss-javadocUpgrade resteasyUpgrade javassistUpgrade jss-debuginfoUpgrade pki-caUpgrade jackson-annotationsUpgrade xalan-j2Upgrade jackson-coreUpgrade jss-debugsourceUpgrade xml-commons-apisUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade slf4jUpgrade python-nss-debugsourceUpgrade tomcatjssUpgrade glassfish-fastinfosetUpgrade python3-nss-debuginfoUpgrade apache-commons-netUpgrade javassist-javadocUpgrade xsomUpgrade pki-core-debuginfoUpgrade relaxngDatatypeUpgrade pki-servlet-engineUpgrade glassfish-jaxb-apiUpgrade python3-pkiUpgrade ldapjdk-javadocUpgrade jssUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-collectionsUpgrade velocityUpgrade xml-commons-resolverUpgrade jackson-jaxrs-json-providerUpgrade pki-baseUpgrade pki-core-debugsourceUpgrade jackson-databindUpgrade slf4j-jdk14Upgrade python3-nssUpgrade pki-tools-debuginfoUpgrade pki-symkeyUpgrade xmlstreambufferUpgrade python-nss-docUpgrade ldapjdkUpgrade glassfish-jaxb-coreUpgrade bea-stax-apiUpgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-providersUpgrade xerces-j2 | Aug 24, 2022 | May 13, 2022 |
| Debian | — | Upgrade tomcat9 | Jul 30, 2024 | May 13, 2022 |
| Redhat_linux | — | No solution existsUpgrade pki-core-debugsourceUpgrade pki-toolsUpgrade jackson-coreUpgrade jss-debuginfoUpgrade xml-commons-resolverUpgrade xsomUpgrade pki-servlet-4.0-apiUpgrade pki-kraUpgrade python-nss-docUpgrade jackson-jaxrs-providersUpgrade pki-caUpgrade velocityUpgrade apache-commons-collectionsUpgrade pki-symkeyUpgrade slf4j-jdk14Upgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade pki-core-debuginfoUpgrade jssUpgrade python3-nssUpgrade pki-baseUpgrade javassist-javadocUpgrade resteasyUpgrade glassfish-jaxb-coreUpgrade jackson-jaxrs-json-providerUpgrade jackson-annotationsUpgrade jackson-databindUpgrade pki-base-javaUpgrade glassfish-jaxb-txw2Upgrade xerces-j2Upgrade pki-servlet-engineUpgrade relaxngDatatypeUpgrade xml-commons-apisUpgrade apache-commons-netUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade xmlstreambufferUpgrade glassfish-jaxb-apiUpgrade jss-javadocUpgrade jakarta-commons-httpclientUpgrade pki-tools-debuginfoUpgrade xalan-j2Upgrade glassfish-fastinfosetUpgrade jackson-module-jaxb-annotationsUpgrade slf4jUpgrade javassistUpgrade bea-stax-apiUpgrade python3-pkiUpgrade jss-debugsourceUpgrade apache-commons-langUpgrade pki-serverUpgrade ldapjdkUpgrade tomcatjss | Aug 24, 2022 | May 13, 2022 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub