Upgrade Tomcat to mitigate CVE-2022-29885

XMLWordPrintable

    • 2
    • Severity 2 - Major

      Issue summary

      Apache Tomcat should be upgraded to 8.5.79 or a superior version to fix CVE-2022-29885

      Environment

      Bamboo 7, 8

      Steps to Reproduce

      1. Check tomcat version on pom.xml or <bamboo-install>/bin/version.sh/bat

      Expected Results

      apache-tomcat 8.5.79+ is  expected

      Actual Results

      apache-tomcat 8.5.78 (or older) is used

      Workaround

      At your own risk, you can manually upgrade Tomcat as instructed on this KB:

      WARNING: Unless still reproducible on official releases, Atlassian Support may refuse support requests for Bamboo running over unofficial Tomcat versions.

            Assignee:
            Marcin Gardias
            Reporter:
            Eduardo Alvarenga (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: