CVE-2024-50379 and CVE-2024-56337 Apache Tomcat Remote Code Execution Vulnerability

Description of Issue

Apache Tomcat vulnerability that can allow Remote Code Execution via write enabled Default Servlet.

Context

Cause

Originally identified under CVE-2024-50379. Further mitigation was needed and an updated CVE for this is under CVE-2024-56337.

Resolution

Update Content Manager to the lastest 2024.1 version or newer.

Additional Information

Knowledge Assistant