컴포넌트 명 : Apache Tomcat
| 버전 정보 | 취약점 ID | 취약점 최종 보고일 | 심각도 |
|---|---|---|---|
| 5.5.28-deployer | CVE-2020-8022 | 2021/03/17 | 7.2 (High) |
취약점 ID : CVE-2020-8022
| 취약점 설명 | A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue affects: SUSE Enterprise Storage 5 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP4 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 12-SP5 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 15-LTSS tomcat versions prior to 9.0.35-3.57.3. SUSE Linux Enterprise Server for SAP 12-SP2 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 12-SP3 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 15 tomcat versions prior to 9.0.35-3.57.3. SUSE OpenStack Cloud 7 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud 8 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud Crowbar 8 tomcat versions prior to 8.0.53-29.32.1. 다수 버전의 Tomcat 패키지의 잘못된 기본 권한 취약성 존재 |
|---|---|
| 대응 방안 | (8 버전) 29.32.1 이상 버전으로 업데이트 (9 버전) 3.57.3 이상 버전으로 업데이트 |
| 기타 | - |
-
| 번호 | 컴포넌트 명 및 버전 | 취약점ID | 심각도 |
취약점 최종 보고일 |
대응방안 |
|---|---|---|---|---|---|
| 155 | SQlite 3.25.0 | CVE-2020-11656 | 7.5 (High) | 2021/07/22 |
|
| 154 | Bouncy Castle 1.46 | CVE-2018-5382 | 7.5 (High) | 2021/04/21 |
|
| 153 | Apache Tomcat 5.5.28-deployer | CVE-2020-8022 | 7.2 (High) | 2021/03/17 |
|
| 152 | Spring Framework 4.1.9.RELEASE | CVE-2018-1270 | 7.5 (High) | 2021/04/23 |
|
| 151 | Apache Spark 2.3.0 | CVE-2020-9480 | 9.3 (Critical) | 2021/04/02 |
|
| 150 | Apache Storm 1.1.0 | CVE-2018-11779 | 7.5 (High) | 2019/10/09 |
|
| 149 | Apache Hadoop 2.9.1 | CVE-2018-8029 | 9.0 (Critical) | 2020/10/08 |
|
| 148 | Apache Mesos 1.5.0 | CVE-2019-0204 | 9.3 (Critical) | 2019/11/14 |
|
| 147 | Apache Camel Netty 2.22.0 | CVE-2020-11973 | 7.5 (High) | 2021/03/15 |
|
| 146 | Apache Spark 2.3 | CVE-2018-17190 | 7.5 (High) | 2020/08/24 |
|
