Analysis Summary

CVE-2024-42323 CVSS:8.8

Apache HertzBeat could allow a remote authenticated attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data by SnakeYAML. An attacker could exploit the vulnerability to execute arbitrary code on the system.

CVE-2024-22399 CVSS:9.8

Apache Seata could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-46544 CVSS:5.1

Apache Tomcat Connectors could allow a local attacker to bypass security restrictions, caused by an incorrect default permissions vulnerability in the mod_jk component. An attacker could exploit this vulnerability to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.

Impact

• Code Execution
• Security Bypass

Indicators of Compromise

CVE

• CVE-2024-42323
• CVE-2024-22399
• CVE-2024-46544

Affected Vendors

Remediation

Upgrade to the latest version of Apache, available from the Apache Website.

CVE-2024-42323

CVE-2024-22399

CVE-2024-46544