Vulnerability DatabaseCVE-2024-52318
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2024-52318
November 18, 2024
Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.
Related Resources (11)
https://github.com/apache/tomcat/commit/be8e32143a3159e78fe5463d09bb8e1b33bf2b1f
https://tomcat.apache.org/security-11.html
https://bz.apache.org/bugzilla/show_bug.cgi?id=69333
https://github.com/apache/tomcat
http://www.openwall.com/lists/oss-security/2024/11/18/4
https://security.netapp.com/advisory/ntap-20250131-0009/
https://lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9
https://security.netapp.com/advisory/ntap-20250131-0009
https://nvd.nist.gov/vuln/detail/CVE-2024-52318
https://github.com/apache/tomcat/commit/9813c5dd3259183f659bbb83312a5cf673cc1ebf
https://github.com/apache/tomcat/commit/8d1fc4733a06d1a03b9d644c57010f2ec5f0df38
Do you need more information?
Contact Us
CVSS v4
Base Score:
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
NONE
Subsequent System Confidentiality
LOW
Subsequent System Integrity
LOW
Subsequent System Availability
NONE
CVSS v3
Base Score:
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Weakness Type (CWE)
Inadequate Encryption Strength
CWE-326
EPSS
Base Score:
12.00