Log in Start free

Vulnerability · Published Jan 27, 2022 · Assigned by apache

CVE-2022-23181Local privilege escalation with FileStore

High 7.0

In plain English

A high-severity security flaw in Apache Tomcat from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.0High
Exploit odds (30 days)0.7%top 46.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12tomcat99.0.58-1DEBIAN-CVE-2022-23181
Debian:13tomcat99.0.58-1DEBIAN-CVE-2022-23181
Debian:14tomcat99.0.58-1DEBIAN-CVE-2022-23181
Mavenorg.apache.tomcat:tomcat10.0.16GHSA-9f3j-pm6f-9fm5
Mavenorg.apache.tomcat:tomcat9.0.58GHSA-9f3j-pm6f-9fm5
Mavenorg.apache.tomcat:tomcat8.5.75GHSA-9f3j-pm6f-9fm5

Affected products (as reported)

VendorProductVersions
Apache Software Foundation Apache Tomcat Apache Tomcat 10.1 10.1.0-M1 to 10.1.0-M8Apache Tomcat 10.0 10.0.0-M5 to 10.0.14Apache Tomcat 9 9.0.35 to 9.0.56Apache Tomcat 8 8.5.55 to 8.5.73

Weakness: CWE-367

References