CVE-2024-5231: Apache Tomcat 9 Authentication Bypass Vulnerability

Products

• Messaging Gateway

Issue/Introduction

A concern has been raised regarding whether the Messaging Gateway Control Center web interface is vulnerable to CVE-2024-5231.

Environment

Version: 10.9.2 and later

Resolution

Messaging Gateway does not use the Jakarta Authentication ServerAuthContext components and so is not vulnerable to CVE-2024-5231.

Additional Information

• CVE-2024-5231