Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
10.1.40-1ubuntu1.25.10.111.0.6-19.0.95-1ubuntu1.110.1.40-1ubuntu1.26.04.19.0.115-1ubuntu0.16.0.39-1ubuntu0.1+esm37.0.52-1ubuntu0.16+esm27.0.68-1ubuntu0.4+esm48.0.32-1ubuntu1.13+esm28.5.39-1ubuntu1~18.04.3+esm6Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:HI:HA:NCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N