CyberRota Analysis
AI-GeneratedApache Tomcat versions 7.0.0 through 11.0.24 are vulnerable to an improper access control issue that allows for the bypass of security constraints when a longer path is defined before a more restrictive constraint for a shorter sub-path. This vulnerability can lead to unauthorized access to sensitive resources, potentially compromising application security. Organizations using affected versions should prioritize upgrading to the latest releases (11.0.25, 10.1.58, or 9.0.121) to mitigate this risk.
Original NVD Description
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Users are recommended to upgrade to version 11.0.25, 10.1.58, 9.0.121, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)