EncryptInterceptor does not provide complete protection on insecure networks
45Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 73%
from disclosure to weapon49 days
Published on NVDMay 12
1st PoC+49d
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.
Affected products
Apache Software Foundation · Apache Tomcatpublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/51262unverifiedgithubgithub.com/quynhlab/CVE-2022-29885★ 5githubgithub.com/iveresk/CVE-2022-29885★ 4cve_referencepacketstormsecurity.com/files/171728/Apache-Tomcat-10.1-Denial-Of-Service.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/171728/Apache-Tomcat-10.1-Denial-Of-Service.htmlhttps://lists.apache.org/thread/2b4qmhbcyqvc7dyfpjyx54c03x65vhcvhttps://lists.debian.org/debian-lts-announce/2022/10/msg00029.htmlhttps://security.netapp.com/advisory/ntap-20220629-0002/https://www.debian.org/security/2022/dsa-5265https://www.oracle.com/security-alerts/cpujul2022.html