This critical vulnerability in Apache Tomcat allows for the potential exposure of sensitive data and is confirmed to be actively exploited in the wild.

This is a missing encryption of sensitive data vulnerability (CWE-311) within the Apache Tomcat framework, which can be triggered by an unauthenticated remote attacker.

The exploitation of this flaw allows for the unauthorized access to sensitive information transmitted by the application. Given the CVSS score of 9.5 and confirmed active exploitation, organizations face a critical risk of data breach, loss of confidentiality, and regulatory non-compliance. Immediate remediation is required to prevent unauthorized data interception.

Immediate Action: Update Apache Tomcat to version 11.0.21, 10.1.54, or 9.0.117 immediately to apply the necessary security fixes.

Proactive Monitoring: Review network traffic and server logs for unusual patterns or unauthorized access attempts targeting Tomcat service ports.

Compensating Controls: Deploy Web Application Firewall rules to detect and block malicious traffic patterns attempting to exploit data transmission vulnerabilities while the patching process is underway.

Public Exploit Available: No (A Nuclei detection template exists, but no weaponized exploit such as a Metasploit module or ExploitDB entry is confirmed in the provided data).

The combination of a 9.5 CVSS score and active exploitation in the wild necessitates an immediate and prioritized response. Administrators must transition all affected instances to the patched versions without delay to eliminate this critical risk to organizational data integrity.