Description

A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak.

Remediation

References

https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz

https://security.netapp.com/advisory/ntap-20230714-0003/

Related Vulnerabilities

CVE-2020-9498 Vulnerability in maven package org.apache.guacamole:guacamole

CVE-2023-35151 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rest-server

CVE-2023-37948 Vulnerability in maven package org.jenkins-ci.plugins:oracle-cloud-infrastructure-compute

CVE-2021-39148 Vulnerability in maven package com.thoughtworks.xstream:xstream

CVE-2022-23221 Vulnerability in maven package com.h2database:h2

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Mailing List Vendor Advisory Third Party Advisory NVD-CWE-noinfo