CVE-2024-22029

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Oct 16, 2024
Source updated: Aug 26, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

tomcat packaging allows for escalation to root from tomcat user

Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122

Vendor: SUSE
Product: Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122
Platforms: Unknown
Default status: unaffected
Package: tomcat

Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Enterprise Storage 7.1

Vendor: SUSE
Product: SUSE Enterprise Storage 7.1
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Enterprise Storage 7.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP5
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise High Performance Computing 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Module for Web and Scripting 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Module for Web and Scripting 15 SP5
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Module for Web and Scripting 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Server 15 SP5
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 15 SP5
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server for SAP Applications 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP6
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise High Performance Computing 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Module for Web and Scripting 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise Module for Web and Scripting 15 SP6
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Module for Web and Scripting 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise Server 15 SP6
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 15 SP6
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server for SAP Applications 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server 15 SP2-LTSS

Vendor: SUSE
Product: SUSE Linux Enterprise Server 15 SP2-LTSS
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server 15 SP2-LTSS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server 15 SP3-LTSS

Vendor: SUSE
Product: SUSE Linux Enterprise Server 15 SP3-LTSS
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server 15 SP3-LTSS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server 15 SP4-LTSS

Vendor: SUSE
Product: SUSE Linux Enterprise Server 15 SP4-LTSS
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server 15 SP4-LTSS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 15 SP2

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 15 SP2
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server for SAP Applications 15 SP2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 15 SP3

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 15 SP3
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server for SAP Applications 15 SP3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 15 SP4

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 15 SP4
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Linux Enterprise Server for SAP Applications 15 SP4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

SUSE Manager Server 4.3

Vendor: SUSE
Product: SUSE Manager Server 4.3
Platforms: Unknown
Default status: unaffected
Package: tomcat

SUSE Manager Server 4.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

openSUSE Leap 15.5

Vendor: SUSE
Product: openSUSE Leap 15.5
Platforms: Unknown
Default status: unaffected
Package: tomcat

openSUSE Leap 15.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-150200.57.1	Unavailable	None listed

openSUSE Tumbleweed

Vendor: SUSE
Product: openSUSE Tumbleweed
Platforms: Unknown
Default status: unaffected
Package: tomcat

openSUSE Tumbleweed · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	9.0.85-3.1	Unavailable	None listed