Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Apache Releases Security Advisory for Apache Tomcat

Apache has released a security advisory to address a vulnerability in Apache Tomcat. An attacker could exploit this vulnerability to cause a denial-of-service condition.

Threat ID:
CC-3113
Category:
Threat Severity:
Medium
Threat Vector:
Published:
24 June 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Apache has released a security advisory to address a vulnerability in Apache Tomcat. An attacker could exploit this vulnerability to cause a denial-of-service condition.

Affected platforms

The following platforms are known to be affected:

Apache Tomcat

Apache Tomcat - Versions 8.5.0 to 8.5.40 and 9.0.0.M1 to 9.0.19

Threat details

Remediation steps

Type Step

Users and administrators are encouraged to review the Apache security advisory for CVE-2019-10072 and upgrade to the appropriate version.

CVE Vulnerabilities

Status

CVE-2019-10072

Last edited: 14 February 2020 2:49 pm