F5-K000149857: Medium severity f5 traffix systems signaling delivery controller vulnerability
Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests could lead to request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.0-M26, from 10.1.27 through 10.1.30, from 9.0.92 through 9.0.95. Users are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000149857?
The severity of F5-K000149857 is considered high due to the potential for request and response mix-ups between users.
How do I fix F5-K000149857?
To fix F5-K000149857, upgrade Apache Tomcat to a version later than 11.0.0-M26 or 10.1.3.
What versions of Apache Tomcat are affected by F5-K000149857?
F5-K000149857 affects Apache Tomcat versions from 11.0.0-M23 through 11.0.0-M26 and from 10.1.27 through 10.1.3.
What type of vulnerability is F5-K000149857?
F5-K000149857 is an incorrect object recycling and re-use vulnerability affecting HTTP/2 requests.
Who is affected by F5-K000149857?
Organizations using affected versions of Apache Tomcat with F5 Traffix SDC 5.2.0 are at risk due to F5-K000149857.