Threats tagged 'ghsa-h3mr-2w3q-jcv9'

A Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat affects Unix domain socket permission setting, allowing unauthorized local users to access the socket. This issue impacts Apache Tomcat versions 9.0.42 through 9.0.120, 10.1.0 through 10.1.57, and 11.0.0 through 11.0.24. Fixed versions are 9.0.121, 10.1.58, and 11.0.25. The vulnerability has a CVSS score of 8.1, indicating a high severity level. No known exploits are reported in the wild. This vulnerability does not affect cloud services and is not known to target any specific countries.