CVE:CVE-2021-30640
CNNVD:CNNVD-202107-684
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。
Apache Tomcat存在授权问题漏洞，该漏洞源于Apache Tomcat 的 JNDI 领域中的一个漏洞允许攻击者使用有效用户名的变体进行身份验证和/或绕过锁定领域提供的某些保护。
solution:Upgrade apache tomcat to a higher version than 7.0.109,8.5.66,9.0.46,10.0.6,and avoid the version [7.0.0,7.0.109),[8.5.0,8.5.66),[9.0.0,9.0.46),[10.0.0,10.0.6); Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.0,and avoid the version [8.0.0,8.5.0]; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle hospitality_cruise_shipboard_property_management_system to a higher version than 20.1.0,and avoid the version 20.1.0; Upgrade oracle tekelec_platform_distribution to a higher version than 7.7.1,and avoid the version [7.4.0,7.7.1]; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0