Language:
Severity: High
ID: 197878
File Name: oraclelinux_ELSA-2024-3307.nasl
Version: 1.8
Type: local
Agent: unix
Published: 5/24/2024
Updated: 9/11/2025
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus
Risk Factor: Medium
Score: 4.4
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS Score Source: CVE-2024-24549
Risk Factor: Medium
Base Score: 6.3
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS Score Source: CVE-2024-23672
Risk Factor: High
Base Score: 8.7
Threat Score: 7.7
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CPE: p-cpe:/a:oracle:linux:tomcat-admin-webapps, p-cpe:/a:oracle:linux:tomcat-webapps, cpe:/o:oracle:linux:9, p-cpe:/a:oracle:linux:tomcat-lib, p-cpe:/a:oracle:linux:tomcat-el-3.0-api, p-cpe:/a:oracle:linux:tomcat-docs-webapp, p-cpe:/a:oracle:linux:tomcat, p-cpe:/a:oracle:linux:tomcat-servlet-4.0-api, p-cpe:/a:oracle:linux:tomcat-jsp-2.3-api
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/23/2024
Vulnerability Publication Date: 2/19/2024
CVE: CVE-2024-23672, CVE-2024-24549
IAVA: 2024-A-0144-S