{"vulnerability": "CVE-2025-49124", "sightings": [{"uuid": "d73e1c3c-9920-4e55-8962-ffc25e0cd858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lruc6xl6o22x", "content": "", "creation_timestamp": "2025-06-18T05:38:29.174770Z"}, {"uuid": "225a4c19-dd5a-4a24-8d6f-baa641434a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "bcc21cb7-31fa-4c21-86f0-24740ebe34d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/254", "content": "", "creation_timestamp": "2025-06-16T15:23:05.000000Z"}, {"uuid": "ade39ff6-227f-4aee-8e72-c70b89963f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrsrc3gnvy2r", "content": "", "creation_timestamp": "2025-06-17T15:03:20.165119Z"}, {"uuid": "9eb9cab3-fc2c-4542-ad73-904bf0d8249d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3lru3lbdtfi2k", "content": "", "creation_timestamp": "2025-06-18T03:40:06.375867Z"}, {"uuid": "1a9cfc41-38d4-4184-81ca-a1b23e67d756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114693794996406990", "content": "", "creation_timestamp": "2025-06-16T15:40:25.215337Z"}, {"uuid": "6a0e5e9b-e1a3-4fa5-b2e4-4d9315a58636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrqjibz4q32f", "content": "", "creation_timestamp": "2025-06-16T17:38:18.946934Z"}, {"uuid": "7256d93c-1ac3-4e1d-96c3-9522b542d892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lrr52oerps2m", "content": "", "creation_timestamp": "2025-06-16T23:28:40.279713Z"}, {"uuid": "570106cd-162d-4178-8ab0-d36fb58ec8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49124", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18450", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49124\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. During installation, the Tomcat installer for Windows used icacls.exe without specifying a full path.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0 through 10.1.41, from 9.0.23 through 9.0.105.\n\nUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.\n\ud83d\udccf Published: 2025-06-16T14:22:16.288Z\n\ud83d\udccf Modified: 2025-06-16T14:22:16.288Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/lnow7tt2j6hb9kcpkggx32ht6o90vqzv", "creation_timestamp": "2025-06-16T14:38:03.000000Z"}]}