CVE-2024-22029
tomcat packaging allows for escalation to root from tomcat user
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
tomcat packaging allows for escalation to root from tomcat user
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
- Record
CVE-2024-22029- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-732
- Updated
- 2026-11-02
EUVDEUVD-2024-19635
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
- Record
EUVD-2024-19635- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w8vw-x82m-vg68
Insecure permissions in the packaging of tomcat allow local users that win a race during package...
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
- Record
GHSA-w8vw-x82m-vg68- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-732
- Updated
- 2026-11-02
NVD
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
- Record
CVE-2024-22029- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-732
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13692-1 No score
tomcat-9.0.85-3.1 on GA media
These are all security issues fixed in the tomcat-9.0.85-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13692-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13693-1 No score
tomcat10-10.1.18-3.1 on GA media
These are all security issues fixed in the tomcat10-10.1.18-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13693-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0472-1 No score
Security update for tomcat
This update for tomcat fixes the following issues:
Updated to Tomcat 9.0.85:
- CVE-2023-45648: Improve trailer header parsing (bsc#1216118).
- CVE-2023-42794: FileUpload: remove tmp files to avoid DoS on Windows (bsc#1216120).
- CVE-2023-42795: Improve handling of failures during recycle() methods (bsc#1216119).
- CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing (bsc#1217649)
- CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. (bsc#1219208)
The following non-security issues were fixed:
- Fixed the file permissions for server.xml (bsc#1217768, bsc#1217402).
Find the full release notes at:
- Record
SUSE-SU-2024:0472-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0473-1 No score
Security update for tomcat10
This update for tomcat10 fixes the following issues:
- CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. (bsc#1219208)
- Record
SUSE-SU-2024:0473-1- Updated
- 2026-11-02
Affected products
- suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122
- suse opensuse leap 15.5
- suse opensuse tumbleweed
- suse enterprise storage 7.1
- suse linux enterprise high performance computing 15 sp2-ltss
- suse linux enterprise high performance computing 15 sp3-ltss
- suse linux enterprise high performance computing 15 sp4-espos
- suse linux enterprise high performance computing 15 sp4-ltss
- suse linux enterprise high performance computing 15 sp5
- suse linux enterprise high performance computing 15 sp6
- suse linux enterprise module for web and scripting 15 sp5
- suse linux enterprise module for web and scripting 15 sp6
Show 11 moreShow less
- suse linux enterprise server 15 sp2-ltss
- suse linux enterprise server 15 sp3-ltss
- suse linux enterprise server 15 sp4-ltss
- suse linux enterprise server 15 sp5
- suse linux enterprise server 15 sp6
- suse linux enterprise server for sap applications 15 sp2
- suse linux enterprise server for sap applications 15 sp3
- suse linux enterprise server for sap applications 15 sp4
- suse linux enterprise server for sap applications 15 sp5
- suse linux enterprise server for sap applications 15 sp6
- suse manager server 4.3
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tomcatSUSE:Linux Enterprise Module for Web and Scripting 15 SP5 From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcatSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Manager Server 4.3 From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatSUSE:Enterprise Storage 7.1 From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcatopenSUSE:Leap 15.5 From an advisory covering 5 CVEs |
before 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
tomcat10SUSE:Linux Enterprise Module for Web and Scripting 15 SP5 |
before 10.1.18-150200.5.11.1 | 10.1.18-150200.5.11.1 |
tomcat10openSUSE:Leap 15.5 |
before 10.1.18-150200.5.11.1 | 10.1.18-150200.5.11.1 |
tomcatopenSUSE:Tumbleweed |
before 9.0.85-3.1 | 9.0.85-3.1 |
tomcat10openSUSE:Tumbleweed |
before 10.1.18-3.1 | 10.1.18-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-22029 is a high vulnerability (CVSS 7.8) in Suse Container Suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, published February 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in tomcat10 10.1.18-150200.5.11.1.
References
bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22029
nvd.nist.gov/vuln/detail/CVE-2024-22029
github.com/advisories/GHSA-w8vw-x82m-vg68
suse.com/support/update/announcement/2024/suse-su-20240472-1
Show 11 moreShow less