PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2024-22029

CVE-2024-22029

tomcat: Escalation to root from tomcat user via %post script

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · February 14, 2024

Updated · November 21, 2025

Description

A flaw was found in the Tomcat package of OpenSUSE and derived distributions. This issue occurs due to incorrect permissions and a race condition in the %post section of the Tomcat RPM package, resulting in local privilege escalation when the Tomcat package is re-installed.

Statement

This flaw is specific to OpenSUSE and derived distributions. Therefore, Red Hat products are not affected by this issue.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-269 · Improper Privilege Management