An update of the apache package has been released.

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The fix for CVE-2020-9484 was incomplete. When using     Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41,     8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a     configuration edge case that was highly unlikely to be     used, the Tomcat instance was still vulnerable to     CVE-2020-9494. Note that both the previously published     prerequisites for CVE-2020-9484 and the previously     published mitigations for CVE-2020-9484 also apply to     this issue.(CVE-2021-25329)

  - When serving resources from a network location using     the NTFS file system, Apache Tomcat versions 10.0.0-M1     to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and     7.0.0 to 7.0.106 were susceptible to JSP source code     disclosure in some configurations. The root cause was     the unexpected behaviour of the JRE API     File.getCanonicalPath() which in turn was caused by the     inconsistent behaviour of the Windows API     (FindFirstFileW) in some circumstances.(CVE-2021-24122)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of tomcat installed on the remote host is prior to 8.5.63-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT8.5-2023-009 advisory.

    A flaw was found in Apache Tomcat. When responding to new h2c connection requests, Apache Tomcat could     duplicate request headers and a limited amount of request body from one request to another meaning user A     and user B could both see the results of user A's request. The highest threat from this vulnerability is     to data confidentiality. (CVE-2021-25122)

    The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to     9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be     used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published     prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to     this issue. (CVE-2021-25329)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8731:12 advisory.

    * Fix file path bug introduced by the CVE-2021-25329 fix     CVE(s):
    CVE-2021-25329     The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to     9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be     used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published     prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to     this issue.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6908-1 advisory.

    It was discovered that the Tomcat SSI printenv command echoed user provided data without escaping it. An     attacker could possibly use this issue to perform an XSS attack. (CVE-2019-0221)

    It was discovered that Tomcat incorrectly handled certain uncommon PersistenceManager with FileStore     configurations. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2020-9484,     CVE-2021-25329)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2561 advisory.

    Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web     applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster),     the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.

    This release of Red Hat JBoss Web Server 5.5.0 serves as a replacement for Red Hat JBoss Web Server 5.4.2,     and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes,     linked to in the References.

    Security Fix(es):

    * hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String     literals are used (CVE-2020-25638)
    * tomcat: Request mix-up with h2c (CVE-2021-25122)
    * tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence) (CVE-2021-25329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5360-1 advisory.

    It was discovered that Tomcat incorrectly performed input verification. A remote attacker could possibly     use this issue to intercept sensitive information. (CVE-2020-13943, CVE-2020-17527, CVE-2021-25122,     CVE-2021-30640)

    It was discovered that Tomcat did not properly deserialize untrusted data. An attacker could possibly use     this issue to execute arbitrary code. (CVE-2020-9484, CVE-2021-33037)

    It was discovered that Tomcat did not properly validate the input length. An attacker could possibly use     this to trigger an infinite loop, resulting in a denial of service. (CVE-2021-25329, CVE-2021-41079)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
147953	Photon OS 3.0: Apache PHSA-2021-3.0-0208	Nessus	PhotonOS Local Security Checks	2021/3/22	2025/8/22	high
149164	EulerOS 2.0 SP3 : tomcat (EulerOS-SA-2021-1856)	Nessus	Huawei Local Security Checks	2021/4/30	2024/1/2	high
181968	Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT8.5-2023-009 (ALASTOMCAT8.5-2023-009)	Nessus	Amazon Linux Local Security Checks	2023/9/27	2025/9/25	high
292977	MiracleLinux 7 : tomcat-7.0.76-16.0.1.el7.AXS7 (AXSA:2024-8731:12)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
203145	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Tomcat vulnerabilities (USN-6908-1)	Nessus	Ubuntu Local Security Checks	2024/7/23	2024/8/27	high
151116	RHEL 7 / 8 : Red Hat JBoss Web Server 5.5.0 Security (Moderate) (RHSA-2021:2561)	Nessus	Red Hat Local Security Checks	2021/6/29	2024/11/7	high
159385	Ubuntu 18.04 LTS / 20.04 LTS : Tomcat vulnerabilities (USN-5360-1)	Nessus	Ubuntu Local Security Checks	2022/4/1	2024/8/27	high
148353	Photon OS 4.0: Apache PHSA-2021-4.0-0007	Nessus	PhotonOS Local Security Checks	2021/4/7	2025/8/22	high

检测

插件搜索

high

high

high

high

high

high

high

high