Apache Tomcat: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• High 8.6
  CVE-2022-25762

  Response mix-up with WebSocket concurrent send and close

  If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it h…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  May 13, 2022

Revision history

1. 2026-01-25 #6

   Neue Updates von Dell aufgenommen

2. 2024-03-20 #5

   Neue Updates von IBM aufgenommen

3. 2022-10-25 #4

   Neue Updates von IBM aufgenommen

4. 2022-08-04 #3

   Neue Updates von Amazon aufgenommen

5. 2022-08-03 #2

   Neue Updates von AVAYA aufgenommen

6. 2022-05-12 #1

   Initiale Fassung

References

• Apapache Tomcat Security vom 2022-05-12
  https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.21
• Apapache Tomcat Security vom 2022-05-12
  https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.76
• AVAYA Security Advisory ASA-2022-066 vom 2022-08-02
  https://downloads.avaya.com/css/P8/documents/101083100
• Amazon Linux Security Advisory ALAS-2022-1627 vom 2022-08-05
  https://alas.aws.amazon.com/ALAS-2022-1627.html
• IBM Security Bulletin 6831855 vom 2022-10-26
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-siem-is-vulnerable-to-using-components-with-known-vulnerabilities-14/
• IBM Security Bulletin 7144861 vom 2024-03-20
  https://www.ibm.com/support/pages/node/7144861
• Deell Security Update
  https://www.dell.com/support/kbdoc/en-us/000281732/dsa-2025-075-security-update-for-dell-data-protection-advisor-for-multiple-component-vulnerabilities