Yüksek CISA KEV
CVE-2020-1938: Apache Tomcat: aktif olarak istismar edilen açık
Açıklama (NVD)
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
Özet bilgiler
- EPSS
- %99,27 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2022-03-03 · Son tarih: 2022-03-17
Gerekli aksiyon: Apply updates per vendor instructions.