QID 731257
Date Published: 2024-03-14
QID 731257: Apache Tomcat Denial of Service (DoS) Vulnerability (CVE-2024-23672,CVE-2024-24549)
Apache Tomcat is an open source web server and servlet container developed by the Apache Software Foundation.
It was possible for a WebSocket client to keep a WebSocket connection open leading to increased resource consumption.
Affected versions:
Apache Tomcat 8.5.0 to 8.5.98
QID Detection: (Authenticated) - Windows
This QID checks for registry key value and fetch Version Note: this detection will work for installer based setup only.
QID Detection Logic (Unauthenticated):
This QID sends a HTTP GET request to an invalid URL and based on the response confirms the vulnerable instance of Apache Tomcat running on the host.
Successful exploitation of this vulnerability could reveal sensitive information to an unauthorized attacker.
Solution
Customers are advised to upgrade Apache Tomcat to the new version to remediate this vulnerability. For more information please refer to Apache Tomcat Security Advisory.
Vendor References
- Apache_Tomcat_8.5.99 -
tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.99
CVEs related to QID 731257
Software Advisories
| Advisory ID | Software | Component | Link |
|---|---|---|---|
| Apache Tomcat |
tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.99 |