{"id":"CVE-2023-34981","published":"2023-06-21T10:26:16Z","modified":"2025-02-13T16:55:41Z","title":"Apache Tomcat: AJP response header mix-up","vendor":"Apache","product":"Apache Tomcat","tier":"tail","description":{"text":"A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.01116,"percentile":0.65969,"provenance":"source"},"cwes":[{"id":"CWE-732","name":"Incorrect Permission Assignment for Critical Resource"}],"references":[{"url":"https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz","tags":["vendor-advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230714-0003/","tags":[]}],"priority":{"score":18.4,"factors":[{"name":"EPSS percentile","points":13.19},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"apache","affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache Tomcat","versions":["11.0.0-M5","10.1.8","9.0.74","8.5.88"]}],"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat.embed:tomcat-embed-core","vulnerableRanges":[">=11.0.0-M5, <11.0.0-M6",">=10.1.8, <10.1.9",">=9.0.74, <9.0.75"],"patched":["11.0.0-M6","10.1.9","9.0.75"],"from":["GHSA-mppv-79ch-vw6q"],"provenance":"source"},{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat-coyote","vulnerableRanges":[">=8.5.88, <8.5.89"],"patched":["8.5.89"],"from":["GHSA-mppv-79ch-vw6q"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-1844","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2023-41080","published":"2023-08-25","fixed":"11.0.0-M11","kev":false,"link":{"from":"CVE-2023-34981","to":"CVE-2023-41080","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat.embed:tomcat-embed-core","fromFixed":"9.0.75","toFixed":"9.0.80","daysApart":65},{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat.embed:tomcat-embed-core","fromFixed":"10.1.9","toFixed":"10.1.13","daysApart":65}]}},{"cve":"CVE-2023-44487","published":"2023-10-10","fixed":"11.0.0-M12","kev":true,"link":{"from":"CVE-2023-34981","to":"CVE-2023-44487","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat-coyote","fromFixed":"8.5.89","toFixed":"8.5.94","daysApart":111}]}},{"cve":"CVE-2023-45648","published":"2023-10-10","fixed":"11.0.0-M12","kev":false,"link":{"from":"CVE-2023-34981","to":"CVE-2023-45648","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat-coyote","fromFixed":"8.5.89","toFixed":"8.5.94","daysApart":111}]}},{"cve":"CVE-2024-38286","published":"2024-11-07","fixed":"11.0.0-M21","kev":false},{"cve":"CVE-2023-24998","published":"2023-02-20","fixed":"11.0.0-M5","kev":false},{"cve":"CVE-2023-28709","published":"2023-05-22","fixed":"11.0.0-M5","kev":false,"link":{"from":"CVE-2023-28709","to":"CVE-2023-34981","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat.embed:tomcat-embed-core","fromFixed":"9.0.74","toFixed":"9.0.75","daysApart":30},{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat.embed:tomcat-embed-core","fromFixed":"10.1.8","toFixed":"10.1.9","daysApart":30}]}},{"cve":"CVE-2023-34981","published":"2023-06-21","fixed":"11.0.0-M6","kev":false},{"cve":"CVE-2024-52317","published":"2024-11-18","fixed":"11.0.0","kev":false,"link":{"from":"CVE-2023-34981","to":"CVE-2024-52317","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat.embed:tomcat-embed-core","fromFixed":"11.0.0-M6","toFixed":"11.0.0","daysApart":516}]}},{"cve":"CVE-2024-50379","published":"2024-12-17","fixed":"11.0.2","kev":false},{"cve":"CVE-2024-56337","published":"2024-12-20","fixed":"11.0.2","kev":false}],"package":"Maven:org.apache.tomcat.embed:tomcat-embed-core"}}