> CVE-2026-59084

« BACK_TO_HOME
PUBLISHED
2026-07-14 09:16
MODIFIED
2026-07-14 09:16
EPSS (Prob. Exploit)
0.51%
Top 56.7%
DATA SOURCES:
NVD 🔗 2026-07-14 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-11-02

> DESCRIPTION

Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-1059

> CWE DETAILED DESCRIPTIONS

CWE-1059: Insufficient Technical Documentation - The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains descriptions of all of the relevant software/hardware elements of the product.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: tomcat9 security update
An update for tomcat9 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vul...
Red Hat Security Advisory: tomcat security update
An update for tomcat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...
Red Hat Security Advisory: tomcat security, bug fix, and enhancement update
An update for tomcat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CV...
Red Hat Security Advisory: tomcat security update
An update for tomcat is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Co...
Red Hat Security Advisory: tomcat security update
An update for tomcat is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Co...
Red Hat Security Advisory: tomcat security update
An update for tomcat is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security h...
Red Hat Security Advisory: tomcat security update
An update for tomcat is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulne...
Red Hat Security Advisory: tomcat9 security update
An update for tomcat9 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (...

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Tomcat: EncryptInterceptor requirements not clearly documented

AFFECTED PACKAGES:
Unknown / Unknown
ALIASES:
BIT-tomcat-2026-59084

> HISTORIQUE DES MODIFICATIONS

Première apparition
14/07/2026 09:16
Source: NVD
📊 ENRICHISSEMENT 01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-1059: Insufficient Technical Documentation - The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains...
Nouvelle valeur:
CWE-1059: Insufficient Technical Documentation - The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains...
📊 ENRICHISSEMENT 01/08/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-1059: Insufficient Technical Documentation - The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains...
Total des modifications: 2 Dernière mise à jour: 5 days ago

> REFERENCES

https://lists.apache.org/thread/7w9746ootcxo0gvx26xjpw80l31f1qw7
« BACK_TO_HOME