Operations Bridge Tips

Wikis - Page

Knowledge Doc: CVE-2024-52316 Apache Tomcat: Authentication bypass when using Jakarta Authentication API

Raquel Winkler

Raquel Winkler OpenText Employee

OpenText Employee

1 Likes

19 days ago

The article will point to a hotfix that is available to bring the Tomcat to 9.0.97 or later to avoid CVE-2024-52316 reports.

Environment

Operations Bridge Manager (OBM) 24.2

Situation

The OBM servers have been flagged for CVE-2024-52316 Apache Tomcat: Authentication bypass when using Jakarta Authentication API:

https://nvd.nist.gov/vuln/detail/CVE-2024-52316
https://www.cve.org/CVERecord?id=CVE-2024-52316
https://lists.apache.org/thread/lopzlqh91jj9n334g02om08sbysdb928

Does this vulnerability apply to OBM servers, and if so, is there a fix yet?

For cause and resolution, read the complete knowledge article.

Labels:

Support Tips/Knowledge Docs

Comment List

Top Comments

Raquel Winkler 4 days ago +1

Hi Misaq Support is going to update the article - you need to call Support and request the hotfix - it is not available on Marketplace.

Raquel Winkler 4 days ago in reply to Misaq

Hi Misaq Support is going to update the article - you need to call Support and request the hotfix - it is not available on Marketplace.

Raquel Winkler
OpenText Community Manager
If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button
- Cancel
- Vote Up +1 Vote Down
- Sign in to reply
- More
- Cancel
Misaq 19 days ago

KB mentions OBM242HF20241209T113954Z but its not available for download from marketplace.
- Cancel
- Vote Up 0 Vote Down
- Sign in to reply
- More
- Cancel

Related

Recommended

Resources

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Privacy Policy
Terms of Use
Cookies Preferences

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.