✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Advisory – CVE-2020-12414 – Mozilla Firefox for iOS weak security

June 29, 2020
Rewterz

Rewterz Threat Alert – LokiBot Malware – IOCs

June 29, 2020

Rewterz Threat Advisory – CVE-2020-11996 – Apache Tomcat denial of service Vulnerability

Severity

Medium

Analysis Summary

Apache Tomcat is vulnerable to a denial of service. By sending a specially crafted sequence of HTTP/2 requests, a remote attacker could exploit this vulnerability to trigger high CPU usage for several seconds.

Impact

Denial of service

Affected Vendors

Apache Tomcat

Affected Products

  • Apache Tomcat 10.0.0-M1 to 10.0.0-M5
  • Apache Tomcat 9.0.0.M1 to 9.0.35
  • Apache Tomcat 8.5.0 to 8.5.55

Remediation

Upgrade to the latest version of Tomcat (10.0.0-M6, 9.0.36, 8.5.56 or later).

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo