An unauthenticated remote attacker can trigger a denial of service condition in Apache Tomcat due to an improper resource shutdown vulnerability.

This vulnerability, identified as CWE-404, involves an improper resource shutdown or release mechanism. An unauthenticated attacker can exploit this flaw over the network to exhaust resources or crash the application service.

The vulnerability carries a CVSS score of 7.5, which indicates a High severity risk primarily due to the potential for service disruption. Successful exploitation allows an attacker to render the application unavailable to legitimate users, resulting in significant operational downtime, lost productivity, and potential reputational damage.

Immediate Action: Upgrade to Apache Tomcat versions 11.0.10, 10.1.44, or 9.0.108 immediately to resolve the identified resource management flaw.

Proactive Monitoring: Monitor server resource utilization metrics and application access logs for unusual patterns or repeated connection reset attempts that may signal exploitation efforts.

Compensating Controls: Deploy a Web Application Firewall (WAF) to filter malicious traffic and monitor for abnormal request behavior, although these measures are secondary to applying the vendor-supplied patches.

Public Exploit Available: Unknown

Given the high CVSS score and the ease of exploitation by unauthenticated remote actors, organizations should prioritize patching their Apache Tomcat instances. Apply the recommended versions as soon as possible to ensure service continuity and prevent potential service disruption attacks.