CVE-2025-55668

Details

Session Fixation vulnerability in Apache Tomcat via rewrite valve.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.

Affected Packages

fedora:42tomcat

Fixed in:

9.0.0.M1

References

WEBhttp://www.openwall.com/lists/oss-security/2025/08/13/3 ADVISORYhttps://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-55668

CVE-2025-55668

Details

Affected Packages

References

CVSS Analysis

Weakness Type (CWE)

Ecosystems

Timeline