CVE-2023-34981

Summary

CVE-2023-34981 is a newly discovered vulnerability in Apache Tomcat versions 11.0.0-M5, 10.1.8, 9.0.74, and 8.5.88. This issue is a regression from a previous fix for bug 66512. The consequence of this regression is that, when a response lacks HTTP headers, no AJP SEND_HEADERS message will be sent for that response. As a result, at least one AJP proxy (mod_proxy_ajp) will utilize the response headers from the preceding request, leading to an information leak.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.