Skip to content
OpenAdvisories
High DLA-2155-1 1 CVE

tomcat8 - security update

Published Mar 24, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 tomcat8 8.0.14-1+deb8u16

Vulnerabilities 1

  • High 7.0
    CVE-2019-12418

    Insufficiently Protected Credentials in Apache Tomcat

    When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven