Impact of CVE-2024-52316

Products

• VMware Smart Assurance
• VMware Telco Cloud Service Assurance

Issue/Introduction

Details the impact of Apache Tomcat 9 Authentication Bypass Vulnerability (CVE-2024-52316) upon Smarts 10.1.12

Environment

Smarts 10.1.X / 2.X

Resolution

Smarts SAM uses Apache Tomcat 9.0.x, which does not have custom Jakarta Authentication (formerly JASPIC) configured. 

There is no impact from this vulnerability, as such there is no workaround needed.