Red Hat Security Advisory: tomcat security update
Two security vulnerabilities affecting Apache Tomcat in Red Hat Enterprise Linux 9 have been addressed. The first (CVE-2025-31651) involves a bypass of rules in the Rewrite Valve. The second (CVE-2025-55752) involves a directory traversal vulnerability via rewrite that could potentially lead to remote code execution. Red Hat has released updated packages to fix these issues in Tomcat version 9. 0. 87-6. el9_7. 1 for multiple architectures. The update is rated as having an Important security impact by Red Hat Product Security.
AI Analysis
Technical Summary
This advisory covers two vulnerabilities in Apache Tomcat as packaged by Red Hat for Enterprise Linux 9. CVE-2025-31651 allows bypassing rules in the Rewrite Valve component of Tomcat. CVE-2025-55752 is a directory traversal vulnerability via rewrite functionality that may allow remote code execution. Red Hat has issued updated Tomcat packages (version 9.0.87-6.el9_7.1) that address these issues across various supported architectures and update streams. The advisory references Red Hat's errata RHSA-2025:23049 and provides links to detailed update instructions and package downloads.
Potential Impact
Successful exploitation of CVE-2025-31651 could allow attackers to bypass rewrite rules, potentially altering request handling. CVE-2025-55752 could allow directory traversal attacks via rewrite rules, with the possibility of remote code execution, posing a significant risk to affected systems. These vulnerabilities impact the security of web applications running on Apache Tomcat within Red Hat Enterprise Linux 9 environments.
Mitigation Recommendations
Red Hat has released updated Tomcat packages (version 9.0.87-6.el9_7.1) that fix these vulnerabilities. Users should apply the official Red Hat update as described in advisory RHSA-2025:23049 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigation steps are indicated beyond applying the provided security update.
Red Hat Security Advisory: tomcat security update
Description
Two security vulnerabilities affecting Apache Tomcat in Red Hat Enterprise Linux 9 have been addressed. The first (CVE-2025-31651) involves a bypass of rules in the Rewrite Valve. The second (CVE-2025-55752) involves a directory traversal vulnerability via rewrite that could potentially lead to remote code execution. Red Hat has released updated packages to fix these issues in Tomcat version 9. 0. 87-6. el9_7. 1 for multiple architectures. The update is rated as having an Important security impact by Red Hat Product Security.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers two vulnerabilities in Apache Tomcat as packaged by Red Hat for Enterprise Linux 9. CVE-2025-31651 allows bypassing rules in the Rewrite Valve component of Tomcat. CVE-2025-55752 is a directory traversal vulnerability via rewrite functionality that may allow remote code execution. Red Hat has issued updated Tomcat packages (version 9.0.87-6.el9_7.1) that address these issues across various supported architectures and update streams. The advisory references Red Hat's errata RHSA-2025:23049 and provides links to detailed update instructions and package downloads.
Potential Impact
Successful exploitation of CVE-2025-31651 could allow attackers to bypass rewrite rules, potentially altering request handling. CVE-2025-55752 could allow directory traversal attacks via rewrite rules, with the possibility of remote code execution, posing a significant risk to affected systems. These vulnerabilities impact the security of web applications running on Apache Tomcat within Red Hat Enterprise Linux 9 environments.
Mitigation Recommendations
Red Hat has released updated Tomcat packages (version 9.0.87-6.el9_7.1) that fix these vulnerabilities. Users should apply the official Red Hat update as described in advisory RHSA-2025:23049 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigation steps are indicated beyond applying the provided security update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:23049
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-55752"]
- Cvss Version
- null
Threat ID: 6a2929b98dd33fbd8517f4b8
Added to database: 6/10/2026, 9:09:13 AM
Last enriched: 6/10/2026, 9:11:56 AM
Last updated: 6/10/2026, 10:34:00 AM
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.