Last updated: Fri 20 May 2022, 4:30pm AEST

A vulnerability has been discovered that affects certain versions of Apache Tomcat; a HTTP web server leveraged by several Objective solutions.

The identified issue presents as a potential race condition when using WebSockets, that could introduce possible disclosure of information or a Denial-of-Service attack.

More details on the issue are available through CVE-2022-25762.

Please return to this blog post for updates from the Objective Team.

Are my Objective solutions affected?

Since the issue was initially identified, the Objective Product Development Team has been actively investigating the impact of the vulnerability across the entire range of Objective solutions. Each product has been updated with a status, denoting the current state of the investigation and the next steps to be taken.

The following table will be updated as the status of each investigation is updated:

• Not Affected: Vulnerability does not affect this product
• Mitigated: Security configuration put in place whilst awaiting Patch
• Mitigation Available: A Security configuration is available to be applied
• Patch Pending: Investigation complete. Mitigation in progress
• Patch Applied: Patch has been applied by the Objective Team
• Patch Available: Patch available for customers to install. Contact Objective Support for details

Content Solutions

RegTech

Keystone

Planning and Building