Threat database

This security advisory from Red Hat addresses vulnerabilities in the pki-deps:10.6 module used by Red Hat Enterprise Linux 8.2 AUS. It fixes two Apache Tomcat vulnerabilities: CVE-2025-31651, which allows bypass of rules in the Rewrite Valve, and CVE-2025-55752, which involves directory traversal via rewrite with possible remote code execution. The update is rated as having an Important security impact by Red Hat. No CVSS score is provided in the advisory. The vulnerabilities affect components fundamental to the Red Hat Certificate System.