Apache Releases Security Advisory for Tomcat

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Archived Content

In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.

The Apache Software Foundation has released a security advisory to address a vulnerability affecting multiple versions of Apache Tomcat. An attacker could exploit this vulnerability to obtain sensitive information.

CISA encourages users and administrators to review the Apache security advisory for CVE-2021-24122 and upgrade to the appropriate version.

Archived Content

Apache Releases Security Advisory for Tomcat

CISA Releases Eight Industrial Control Systems Advisories

CISA Releases Updated Cybersecurity Performance Goals

CISA and NSA Release Enduring Security Framework Guidance on Identity and Access Management

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

Archived Content

Apache Releases Security Advisory for Tomcat

Related Advisories

CISA Releases Eight Industrial Control Systems Advisories

CISA Releases Updated Cybersecurity Performance Goals

CISA and NSA Release Enduring Security Framework Guidance on Identity and Access Management

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core