GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/43311?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43311?format=api",
    "vulnerability_id": "VCID-9awt-9zjq-yucn",
    "summary": "Uncontrolled Resource Consumption\nThe documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.",
    "aliases": [
        {
            "alias": "CVE-2022-29885"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62021?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.79",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.79"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62022?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.63",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.63"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62023?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.21",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.21"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62024?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@10.1.1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62037?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.79",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.79"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62038?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.63",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.63"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62039?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.21",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.21"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62040?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62025?format=api",
            "purl": "pkg:maven/org.apache.tomcat/coyote@8.5.38",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@8.5.38"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62026?format=api",
            "purl": "pkg:maven/org.apache.tomcat/coyote@8.5.78",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@8.5.78"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62027?format=api",
            "purl": "pkg:maven/org.apache.tomcat/coyote@9.0.13",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@9.0.13"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62028?format=api",
            "purl": "pkg:maven/org.apache.tomcat/coyote@9.0.62",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@9.0.62"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62029?format=api",
            "purl": "pkg:maven/org.apache.tomcat/coyote@10.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@10.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62030?format=api",
            "purl": "pkg:maven/org.apache.tomcat/coyote@10.0.20",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@10.0.20"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62031?format=api",
            "purl": "pkg:maven/org.apache.tomcat/coyote@10.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                },
                {
                    "vulnerability": "VCID-h6f2-qgnu-bqf4"
                },
                {
                    "vulnerability": "VCID-jsyt-cmxf-gbh3"
                },
                {
                    "vulnerability": "VCID-urhs-6aus-syb1"
                },
                {
                    "vulnerability": "VCID-zba8-2zc4-9qfh"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/coyote@10.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/57778?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.38",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.38"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62017?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.78",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.78"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62018?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.13",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.13"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62019?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.62",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.62"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/58391?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                },
                {
                    "vulnerability": "VCID-dbu6-fhrs-aubn"
                },
                {
                    "vulnerability": "VCID-dk58-p9py-rka9"
                },
                {
                    "vulnerability": "VCID-zq8t-zucq-h3c9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62020?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.20",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.20"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/59298?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@10.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                },
                {
                    "vulnerability": "VCID-zba8-2zc4-9qfh"
                },
                {
                    "vulnerability": "VCID-zq8t-zucq-h3c9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62032?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.38",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.38"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62033?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.78",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.78"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62034?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.13",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.13"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62035?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.62",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.62"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/58383?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                },
                {
                    "vulnerability": "VCID-dbu6-fhrs-aubn"
                },
                {
                    "vulnerability": "VCID-dk58-p9py-rka9"
                },
                {
                    "vulnerability": "VCID-y4a2-mamb-yqg6"
                },
                {
                    "vulnerability": "VCID-zq8t-zucq-h3c9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/62036?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.20",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.20"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/59303?format=api",
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-9awt-9zjq-yucn"
                },
                {
                    "vulnerability": "VCID-zq8t-zucq-h3c9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0"
        }
    ],
    "references": [
        {
            "reference_url": "https://lists.apache.org/thread/2b4qmhbcyqvc7dyfpjyx54c03x65vhcv",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://lists.apache.org/thread/2b4qmhbcyqvc7dyfpjyx54c03x65vhcv"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29885",
            "reference_id": "CVE-2022-29885",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29885"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 400,
            "name": "Uncontrolled Resource Consumption",
            "description": "The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        }
    ],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9awt-9zjq-yucn"
}