The host is installed with Apache Tomcat 10.0.0-M5 through 10.0.14, 9.0.35 through 9.0.56 or 8.5.55 through 8.5.73 and is prone to an race condition vulnerability. A flaw is present in application, which fails to handle tomcat persist sessions while using the FileStore. Successful exploitation allows attackers to perform actions with the privileges of the local user.