CVE-2024-52318

Published: Nov 18, 2024Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

Affected (3)

Products: Apache: Tomcat

Apache

1 product

Tomcat

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat	Version 10.1.31
Apache Tomcat	Version 11.0.0
Apache Tomcat	Version 9.0.96

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (3)

https://lists.apache.org/thread/co243cw1nlh6p521c5265cm839wkqdp9

Source: security@apache.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2024/11/18/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://security.netapp.com/advisory/ntap-20250131-0009/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.