Apache Tomcat 9.0.0.M1 < 9.0.71

high Nessus Plugin ID 171657

Language:

Version 1.4 Mar 27, 2023, 6:02 PM IAVM reference Plugin Feed: 202303271802
Version 1.3 Mar 2, 2023, 2:01 PM CVSS metrics ("CVSSv2 score" changed from "6.4" to "7.8". "CVSSv2 score" changed from "6.4" to "7.8". "CVSSv2 score" changed from "6.4" to "7.8". "CVSSv2 score" changed from "6.4" to "7.8". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2023-24998, severity increased from "Medium" to "High") Plugin Feed: 202303021401
Version 1.2 Feb 23, 2023, 8:04 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202302232004
Version 1.1 Feb 21, 2023, 2:00 PM CVSSv3 score source (set to "CVE-2023-24998") CVSS metrics ("CVSSv2 score" changed from "7.5" to "6.4". "CVSSv2 score" changed from "7.5" to "6.4". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H". "CVSSv3 score" changed from "9.8" to "7.5". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H". "CVSSv3 score" changed from "9.8" to "7.5". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2023-24998, severity decreased from "High" to "Medium") Plugin Feed: 202302211400
Version 1.0 Feb 21, 2023, 1:55 AM New Plugin Feed: 202302210155

* Changelogs are generally available for changes made after Nov 1, 2022