← Back
CVE-2020-1938
Apache Tomcat Improper Privilege Management Vulnerability
HighDescription
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
Scores & Signals
| EPSS score | 0.9447 (100.0th percentile) |
| CISA KEV | Yes — actively exploited (added 2022-03-03) · due 2022-03-17 |
| Affected | Apache Tomcat |