جزئیات آسیب‌پذیری
CVE-2026-29146
Apache Software Foundation Apache TomcatRed Hat Enterprise Linux 8Red Hat JBoss Web Server 5
Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9..115, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Users are recommended to upgrade to version 11.0.19, 10.1.53 and 9.0.116, which fixes the issue.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Apache Software Foundation | Apache Tomcat | 10.0.0-M1 ≤ v ≤ 10.1.52 | CVEProject cvelistV5 (CNA) |
| Apache Software Foundation | Apache Tomcat | 11.0.0-M1 ≤ v ≤ 11.0.18 | CVEProject cvelistV5 (CNA) |
| Apache Software Foundation | Apache Tomcat | 7.0.100 ≤ v ≤ 7.0.109 | CVEProject cvelistV5 (CNA) |
| Apache Software Foundation | Apache Tomcat | 8.5.38 ≤ v ≤ 8.5.100 | CVEProject cvelistV5 (CNA) |
| Apache Software Foundation | Apache Tomcat | 9.0.13 ≤ v ≤ 9.0.115 | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat JBoss Web Server 5 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۰- https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w vendor-advisory
- http://www.openwall.com/lists/oss-security/2026/04/09/24
- https://access.redhat.com/security/cve/CVE-2026-29146 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2457020 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29146.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:20405 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39188 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:38505 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36787 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36788 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36790 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37137 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37136 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36878 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36876 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36877 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36879 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20406 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39189 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۲۰
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۵/۲۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- apache
پیش‌بینی بهره‌برداری (EPSS)
۸٫۸۵٪
احتمال بهره‌برداری در ۳۰ روز
۹۵٫۲٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-209Generation of Error Message Containing Sensitive Information
- CWE-642External Control of Critical State Data
- CWE-1240Use of a Cryptographic Primitive with a Risky Implementation