Return
-
Title
Apache Tomcat Vulnerabilities: CVE-2023-42795, CVE-2023-45648, CVE-2024-23672, CVE-2024-24549, CVE-2023-46589 -
Description
Security scan found the following vulnerabilities in Apache Tomcat 9.0.75 used by Foglight 7.1.
- CVE-2023-42795
- CVE-2023-45648
- CVE-2024-23672
- CVE-2024-24549
- CVE-2023-46589
-
Cause
- https://nvd.nist.gov/vuln/detail/CVE-2023-42795
- https://nvd.nist.gov/vuln/detail/CVE-2023-45648
- https://nvd.nist.gov/vuln/detail/CVE-2024-23672
- https://nvd.nist.gov/vuln/detail/CVE-2024-24549
- https://nvd.nist.gov/vuln/detail/CVE-2023-46589
-
Resolution
- CVE-2023-42795 and CVE-2023-45648 will be addressed in Foglight 7.2 which will ship with Apache Tomcat 8.0.82.
- CVE-2024-23672, CVE-2024-24549 and CVE-2023-46589 will be addressed in a future version of the product. Tracked as FOG-8671.
Waiting for fix in a future release of the Foglight.