CVE-2026-34487

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://lists.apache.org/thread/4xpkwolpkrj8v5xzp5nyovtlqp3y850h	Mailing List Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/04/09/28	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apache:tomcat::::::::
	cpe:2.3:a:apache:tomcat::::::::
	cpe:2.3:a:apache:tomcat::::::::

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad de Inserción de Información Sensible en Archivo de Registro en el componente de membresía en la nube para clustering de Apache Tomcat expuso el token portador de Kubernetes. Este problema afecta a Apache Tomcat: desde 11.0.0-M1 hasta 11.0.20, desde 10.1.0-M1 hasta 10.1.53, desde 9.0.13 hasta 9.0.116. Se recomienda a los usuarios actualizar a la versión 11.0.21, 10.1.54 o 9.0.117, que solucionan el problema.

Information

Published : 2026-04-09 20:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-34487

Mitre link : CVE-2026-34487

CVE.ORG link : CVE-2026-34487

JSON object : View

Products Affected

apache

tomcat

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2026-34487", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34487", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-10T17:47:28.920468Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@apache.org", "affectedData": [{"vendor": "Apache Software Foundation", "product": "Apache Tomcat", "versions": [{"status": "affected", "version": "11.0.0-M1", "versionType": "semver", "lessThanOrEqual": "11.0.20"}, {"status": "affected", "version": "10.1.0-M1", "versionType": "semver", "lessThanOrEqual": "10.1.53"}, {"status": "affected", "version": "9.0.13", "versionType": "semver", "lessThanOrEqual": "9.0.116"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-09T20:16:25.203", "references": [{"url": "https://lists.apache.org/thread/4xpkwolpkrj8v5xzp5nyovtlqp3y850h", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/09/28", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue."}, {"lang": "es", "value": "La vulnerabilidad de Inserci\u00f3n de Informaci\u00f3n Sensible en Archivo de Registro en el componente de membres\u00eda en la nube para clustering de Apache Tomcat expuso el token portador de Kubernetes.\n\nEste problema afecta a Apache Tomcat: desde 11.0.0-M1 hasta 11.0.20, desde 10.1.0-M1 hasta 10.1.53, desde 9.0.13 hasta 9.0.116.\n\nSe recomienda a los usuarios actualizar a la versi\u00f3n 11.0.21, 10.1.54 o 9.0.117, que solucionan el problema."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58E041DD-A50A-4A27-93BB-C2302FF96636", "versionEndExcluding": "9.0.117", "versionStartIncluding": "9.0.13"}, {"criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEF3315E-7D6A-447E-B9A4-896758B82EB1", "versionEndExcluding": "10.1.54", "versionStartIncluding": "10.1.0"}, {"criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0155D8E-9EA1-43EA-B368-6418B526D8B5", "versionEndExcluding": "11.0.21", "versionStartIncluding": "11.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}