Executive Summary

Informations
Name CVE-2022-25762 First vendor Publication 2022-05-13
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Overall CVSS Score 8.6
Base Score 8.6 Environmental Score 8.6
impact SubScore 4.7 Temporal Score 8.6
Exploitabality Sub Score 3.9
 
Attack Vector Network Attack Complexity Low
Privileges Required None User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact Low Availability Impact Low
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 7.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25762

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-404 Improper Resource Shutdown or Release

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 476
Application 1

Sources (Detail)

https://lists.apache.org/thread/6ckmjfb1k61dyzkto9vm2k5jvt4o7w7c
https://security.netapp.com/advisory/ntap-20220629-0003/
https://www.oracle.com/security-alerts/cpujul2022.html
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2024-11-28 14:08:09
  • Multiple Updates
2023-12-09 13:20:56
  • Multiple Updates
2023-06-29 02:17:10
  • Multiple Updates
2023-02-23 21:27:33
  • Multiple Updates
2023-01-10 13:08:19
  • Multiple Updates
2022-07-26 00:29:36
  • Multiple Updates
2022-06-30 00:27:25
  • Multiple Updates
2022-05-24 21:27:12
  • Multiple Updates
2022-05-13 21:27:10
  • Multiple Updates
2022-05-13 13:22:54
  • First insertion