CVE-2024-52318

EPSS 3.66%
Published 18.11.2024 13:15:04
Last modified 15.05.2025 17:46:50
Source security@apache.org
Teams watchlist Login
Open Login

Incorrect object recycling and reuse vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96.

Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Apache ≫ Tomcat Version9.0.96

Apache ≫ Tomcat Version10.1.31

Apache ≫ Tomcat Version11.0.0 Update-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.66%	0.874

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.1	2.8	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

https://lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9

Vendor Advisory

http://www.openwall.com/lists/oss-security/2024/11/18/4

Mailing List

https://security.netapp.com/advisory/ntap-20250131-0009/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-52318

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-52318

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-52318

EUVD