Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-22330

Upgrade Tomcat to fix CVE-2023-34981

XMLWordPrintable

      Issue Summary

      Apache Tomcat should be upgraded to 9.0.75+ or a later version to fix CVE-2023-34981

      Bamboo is not vulnerable to this issue as it does not bundle Apache Tomcat 9.0.74 on any of its releases.

      This is an informational ticket to inform customers about the underlying CVE.

      Environment

      • Bamboo 9

      Steps to Reproduce

      • Check the Apache Tomcat version on pom.xml or <bamboo-install>/bin/version.sh/bat

      Expected Results

      • Bamboo 9.x: apache-tomcat 9.0.75 or later

      Actual Results

      • Bamboo 9.x: apache-tomcat 9.0.74

            [BAM-22330] Upgrade Tomcat to fix CVE-2023-34981

            Giovanna Fragoso made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 1005635 ]
            Cathy S made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 880521 ]
            Cathy S made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 872601 ]
            Nhat Vu (Inactive) made changes -
            Remote Link Original: This issue links to "Page (Confluence)" [ 805933 ]
            Nhat Vu (Inactive) made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 805933 ]
            Security Metrics Bot made changes -
            Labels Original: CVE-2023-34981 security security-imported New: CVE-2023-34981 resolved-in-vf security security-imported
            Alexey Chystoprudov made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Waiting for Release [ 12075 ] New: Closed [ 6 ]
            SET Analytics Bot made changes -
            Support reference count Original: 6 New: 7
            SET Analytics Bot made changes -
            UIS New: 4
            SET Analytics Bot made changes -
            Support reference count Original: 5 New: 6

              Unassigned Unassigned
              73868399605e Eduardo Alvarenga
              Affected customers:
              2 This affects my team
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: