The version of tomcat installed on the remote host is prior to 8.5.51-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT8.5-2023-012 advisory.

    The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99     introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were     incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a     reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a     reverse proxy is considered unlikely. (CVE-2019-17569)

    A flaw was found in Apache Tomcat. The HTTP header parsing code used an approach to end-of-line (EOL)     parsing that allowed some invalid HTTP headers to be parsed as valid. This led to the possibility of HTTP     Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid     Transfer-Encoding header in a particular manner. The highest threat with this vulnerability is system     availability. (CVE-2020-1935)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-012)

critical Nessus Plugin ID 182025

Version 1.3