CVE-2020-1938 Apache Tomcat
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
- CVSS
- not scored
On CISA’s exploited list
Apache Tomcat Improper Privilege Management Vulnerability
- Added
- 2022-03-03
- Federal patch deadline
- 2022-03-17
- Ransomware use
- not known