Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2014-0227 (GCVE-0-2014-0227)
Vulnerability from cvelistv5 – Published: 2015-02-16 00:00 – Updated: 2024-08-06 09:05- n/a
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T09:05:39.451Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"name": "USN-2654-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2654-1"
},
{
"name": "RHSA-2015:0765",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"name": "RHSA-2015:0675",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"name": "MDVSA-2015:052",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:052"
},
{
"name": "HPSBUX03341",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2"
},
{
"name": "RHSA-2015:0720",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"name": "SSRT102068",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2"
},
{
"name": "72717",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/72717"
},
{
"name": "RHSA-2015:0991",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0991.html"
},
{
"name": "MDVSA-2015:084",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:084"
},
{
"name": "DSA-3530",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3530"
},
{
"name": "1032791",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032791"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-7.html"
},
{
"name": "RHSA-2015:0983",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0983.html"
},
{
"name": "SSRT102066",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "MDVSA-2015:053",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:053"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
},
{
"name": "FEDORA-2015-2109",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-8.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://source.jboss.org/changelog/JBossWeb?cs=2455"
},
{
"name": "20150209 [SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://advisories.mageia.org/MGASA-2015-0081.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"name": "USN-2655-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2655-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1600984"
},
{
"name": "HPSBUX03337",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "DSA-3447",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3447"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-02-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-02-13T16:09:57.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"name": "USN-2654-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2654-1"
},
{
"name": "RHSA-2015:0765",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"name": "RHSA-2015:0675",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"name": "MDVSA-2015:052",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:052"
},
{
"name": "HPSBUX03341",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2"
},
{
"name": "RHSA-2015:0720",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"name": "SSRT102068",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2"
},
{
"name": "72717",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/72717"
},
{
"name": "RHSA-2015:0991",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0991.html"
},
{
"name": "MDVSA-2015:084",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:084"
},
{
"name": "DSA-3530",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2016/dsa-3530"
},
{
"name": "1032791",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1032791"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-7.html"
},
{
"name": "RHSA-2015:0983",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0983.html"
},
{
"name": "SSRT102066",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "MDVSA-2015:053",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:053"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
},
{
"name": "FEDORA-2015-2109",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-8.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://source.jboss.org/changelog/JBossWeb?cs=2455"
},
{
"name": "20150209 [SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://advisories.mageia.org/MGASA-2015-0081.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"name": "USN-2655-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2655-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1600984"
},
{
"name": "HPSBUX03337",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "DSA-3447",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2016/dsa-3447"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-0227",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"name": "USN-2654-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2654-1"
},
{
"name": "RHSA-2015:0765",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"name": "RHSA-2015:0675",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"name": "MDVSA-2015:052",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:052"
},
{
"name": "HPSBUX03341",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2"
},
{
"name": "RHSA-2015:0720",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"name": "SSRT102068",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2"
},
{
"name": "72717",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/72717"
},
{
"name": "RHSA-2015:0991",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0991.html"
},
{
"name": "MDVSA-2015:084",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:084"
},
{
"name": "DSA-3530",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2016/dsa-3530"
},
{
"name": "1032791",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1032791"
},
{
"name": "http://tomcat.apache.org/security-7.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-7.html"
},
{
"name": "RHSA-2015:0983",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0983.html"
},
{
"name": "SSRT102066",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "MDVSA-2015:053",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:053"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
},
{
"name": "FEDORA-2015-2109",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html"
},
{
"name": "http://tomcat.apache.org/security-8.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-8.html"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"name": "https://source.jboss.org/changelog/JBossWeb?cs=2455",
"refsource": "CONFIRM",
"url": "https://source.jboss.org/changelog/JBossWeb?cs=2455"
},
{
"name": "20150209 [SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling",
"refsource": "BUGTRAQ",
"url": "http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html"
},
{
"name": "http://advisories.mageia.org/MGASA-2015-0081.html",
"refsource": "CONFIRM",
"url": "http://advisories.mageia.org/MGASA-2015-0081.html"
},
{
"name": "http://tomcat.apache.org/security-6.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-6.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"name": "USN-2655-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2655-1"
},
{
"name": "http://svn.apache.org/viewvc?view=revision\u0026revision=1600984",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1600984"
},
{
"name": "HPSBUX03337",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "DSA-3447",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2016/dsa-3447"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2014-0227",
"datePublished": "2015-02-16T00:00:00.000Z",
"dateReserved": "2013-12-03T00:00:00.000Z",
"dateUpdated": "2024-08-06T09:05:39.451Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2014-0227",
"date": "2026-05-29",
"epss": "0.78235",
"percentile": "0.99042"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2014-0227\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2015-02-16T00:59:00.057\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.\"},{\"lang\":\"es\",\"value\":\"java/org/apache/coyote/http11/filters/ChunkedInputFilter.java en Apache Tomcat 6.x anterior a 6.0.42, 7.x anterior a 7.0.55, y 8.x anterior a 8.0.9 no maneja correctamente los intentos de seguir leyendo datos despu\u00e9s de un error haya ocurrido, lo que permite a atacantes remotos realizar ataques de la infiltraci\u00f3n de solicitudes HTTP o causar una denegaci\u00f3n de servicio (consumo de recursos) mediante la transmisi\u00f3n de datos con la codificaci\u00f3n malformada de transferencias fragmentadas.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:P\",\"baseScore\":6.4,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-19\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49E3C039-A949-4F1B-892A-57147EECB249\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.0:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A354C34-A3FE-4B8A-9985-8874A0634BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F28C7801-41B9-4552-BA1E-577967BCBBEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.1:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFE300CC-FD4A-444E-8506-E5E269D0A0A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25B21085-7259-4685-9D1F-FF98E6489E10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.2:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"F50A3EC9-516E-48A7-839B-A73F491B5B9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.2:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C28F09D-5CAA-4CA7-A2B5-3B2820F5F409\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"635EE321-2A1F-4FF8-95BE-0C26591969D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.4:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"FAC2FC75-97D2-4EA1-A1A0-F592A6D7C1F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.6:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4871FD1-7F8C-4677-A80B-4A0BBC71DD7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.7:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"31AB969A-9ACE-44EF-B2E5-CEC008F47C46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.7:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"06217215-72E4-4478-BACB-628A0836A645\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C95ADA4-66F5-45C4-A677-ACE22367A75A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.8:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA810F3F-ADD3-4D3F-9DFC-DBDD87B3079C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11951A10-39A2-4FF5-8C43-DF94730FB794\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.9:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B79F2EA-C893-4359-80EC-24AE38D982E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"351E5BCF-A56B-4D91-BA3C-21A4B77D529A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DC2BBB4-171E-4EFF-A575-A5B7FF031755\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B6B0504-27C1-4824-A928-A878CBBAB32D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D903956B-14F5-4177-AF12-0A5F1846D3C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81F847DC-A2F5-456C-9038-16A0E85F4C3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6B93A3A-D487-4CA1-8257-26F8FE287B8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD8802B2-57E0-4AA6-BC8E-00DE60468569\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8461DF95-18DC-4BF5-A703-7F19DA88DC30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F4C9BCF-9C73-4991-B02F-E08C5DA06EBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2823789C-2CB6-4300-94DB-BDBE83ABA8E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5416C76-46ED-4CB1-A7F8-F24EA16DE7F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A61429EE-4331-430C-9830-58DCCBCBCB58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31B3593F-CEDF-423C-90F8-F88EED87DC3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE7862B2-E1FA-4E16-92CD-8918AB461D9A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9E03BE3-60CC-4415-B993-D0BB00F87A30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE92E59A-FF0D-4D1A-8B12-CC41A7E1FD3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFD64FE7-ABAF-49F3-B8D0-91C37C822F4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48E5E8C3-21AD-4230-B945-AB7DE66307B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4945C8C1-C71B-448B-9075-07C6C92599CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED4730B0-2E09-408B-AFD4-FE00F73700FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8DE8A8A-7643-4292-BCC1-758AE0940207\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9B54FCD-CF7C-47E2-8513-40419E47AF49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.41:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D87EFB6D-B626-469F-907C-40C771A55833\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F8C62EF-1B67-456A-9C66-755439CF8556\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"33E9607B-4D28-460D-896B-E4B7FA22441E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A819E245-D641-4F19-9139-6C940504F6E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C381275-10C5-4939-BCE3-0D1F3B3CB2EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"81A31CA0-A209-4C49-AA06-C38E165E5B68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7205475A-6D04-4042-B24E-1DA5A57029B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08022987-B36B-4F63-88A5-A8F59195DF4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AA563BF-A67A-477D-956A-167ABEF885C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF4B7557-EF35-451E-B55D-3296966695AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8980E61E-27BE-4858-82B3-C0E8128AF521\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8756BF9B-3E24-4677-87AE-31CE776541F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88CE057E-2092-4C98-8D0C-75CF439D0A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F194580-EE6D-4E38-87F3-F0661262256B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9731BAA-4C6C-4259-B786-F577D8A90FA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F74A421-D019-4248-84B8-C70D4D9A8A95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05346F5A-FB52-4376-AAC7-9A5308216545\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"305688F2-50A6-41FB-8614-BC589DB9A789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D24AA431-C436-4AA5-85DF-B9AAFF2548FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25966344-15D5-4101-9346-B06BFD2DFFF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11F4CBAC-27B1-4EFF-955A-A63B457D0578\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD55B338-9DBE-4643-ABED-A08964D3AF7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D4F710E-06EA-48F4-AC6A-6F143950F015\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C4936C2-0B2D-4C44-98C3-443090965F5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48453405-2319-4327-9F4C-6F70B49452C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49DD9544-6424-41A6-AEC0-EC19B8A10E71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4670E65-2E11-49A4-B661-57C2F60D411F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E8FF71D-4710-4FBB-9925-A6A26C450F7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31002A23-4788-4BC7-AE11-A3C2AA31716D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7144EDDF-8265-4642-8EEB-ED52527E0A26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF06B5C1-B9DD-4673-A101-56E1E593ACDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D731065-626B-4425-8E49-F708DD457824\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3D850EA-E537-42C8-93B9-96E15CB26747\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E037DA05-2BEF-4F64-B8BB-307247B6A05C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCAF1EB5-FB34-40FC-96ED-9D073890D8BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D395D95B-1F4A-420E-A0F6-609360AF7B69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BD221BA-0AB6-4972-8AD9-5D37AC07762F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E55B6565-96CB-4F6A-9A80-C3FB82F30546\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3300AFE-49A4-4904-B9A0-5679F09FA01E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED5125CC-05F9-4678-90DB-A5C7CD24AE6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B904C74-B92E-4EAE-AE6C-78E2B844C3DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C6109D1-BC36-40C5-A02A-7AEBC949BAC0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA8A7333-B4C3-4876-AE01-62F2FD315504\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92993E23-D805-407B-8B87-11CEEE8B212F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A11BD74-305C-41E2-95B1-5008EEF5FA5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"595442D0-9DB7-475A-AE30-8535B70E122E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B0BA92A-0BD3-4CE4-9465-95E949104BAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F944B72-B9EB-4EB8-AEA3-E0D7ADBE1305\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFD3EB84-2ED2-49D4-8BC9-6398C2E46F0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEDF6E1A-0DD6-42AB-9510-F6F4B6002C91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C947E549-2459-4AFB-84A7-36BDA30B5F29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D55DF79-F9BE-4907-A4D8-96C4B11189ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14AB5787-82D7-4F78-BE93-4556AB7A7D0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8E9453E-BC9B-4F77-85FA-BA15AC55C245\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4752862B-7D26-4285-B8A0-CF082C758353\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*\",\"matchCriteriaId\":\"58EA7199-3373-4F97-9907-3A479A02155E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4693BD36-E522-4C8E-9667-8F3E14A05EF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BBBC5EA-012C-4C5D-A61B-BAF134B300DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A358FDF-C249-4D7A-9445-8B9E7D9D40AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFF96F96-34DB-4EB3-BF59-11220673FA26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EDF3E379-47D2-4C86-8C6D-8B3C25A0E1C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61E008F8-2F01-4DD8-853A-337B4B4163C6\"}]}]}],\"references\":[{\"url\":\"http://advisories.mageia.org/MGASA-2015-0081.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0675.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0720.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0765.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0983.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0991.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1600984\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-7.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-8.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3447\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3530\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:052\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:053\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:084\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/72717\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id/1032791\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2654-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2655-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1109196\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://source.jboss.org/changelog/JBossWeb?cs=2455\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://advisories.mageia.org/MGASA-2015-0081.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143393515412274\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0675.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0720.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0765.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0983.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0991.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1600984\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-7.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-8.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3447\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3530\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:052\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:053\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:084\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/72717\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1032791\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2654-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2655-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1109196\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://source.jboss.org/changelog/JBossWeb?cs=2455\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
RHSA-2015:0765
Vulnerability from csaf_redhat - Published: 2015-03-31 17:00 - Updated: 2026-05-14 22:17It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user's browser.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Data Virtualization 6.0
Red Hat / Red Hat JBoss Data Virtualization
|
cpe:/a:redhat:jboss_data_virtualization:6.0
|
— |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Data Virtualization 6.0.0 2015 roll up patch 1, which fixes\nmultiple security issues and various bugs, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Data Virtualization is a lean data integration solution that\nprovides easy, real-time, and unified data access across disparate sources\nto multiple applications and users. JBoss Data Virtualization makes data\nspread across physically distinct systems-such as multiple databases, XML\nfiles, and even Hadoop systems-appear as a set of tables in a local\ndatabase.\n\nThis roll up patch serves as a cumulative upgrade for Red Hat JBoss Data\nVirtualization 6.0.0. It includes various bug fixes, which are listed in\nthe README file included with the patch files.\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-5783 fix\n\nCVE-2014-3577 Apache HttpComponents client: SSL hostname verification\nbypass, incomplete CVE-2012-6153 fix\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP,\n8017298)\n\nCVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content\nlength header\n\nCVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal\nEntity (XXE)\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs\n\nCVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web\napplication\n\nCVE-2014-0193 netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter \n\nRed Hat would like to thank James Roper of Typesafe for reporting\nCVE-2014-0193, and Alexander Papadakis for reporting CVE-2014-3530.\nThe CVE-2012-6153 issue was discovered by Florian Weimer of Red Hat Product\nSecurity, the CVE-2014-0075 and CVE-2014-3490 issues were discovered by\nDavid Jorm of Red Hat Product Security, and the CVE-2014-3481 issue was\ndiscovered by the Red Hat JBoss Enterprise Application Platform QE team.\n\nAll users of Red Hat JBoss Data Virtualization 6.0.0 as provided from the\nRed Hat Customer Portal are advised to apply this roll up patch.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0765",
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=securityPatches\u0026version=6.0.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=securityPatches\u0026version=6.0.0"
},
{
"category": "external",
"summary": "1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0765.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.0.0 security update",
"tracking": {
"current_release_date": "2026-05-14T22:17:51+00:00",
"generator": {
"date": "2026-05-14T22:17:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2015:0765",
"initial_release_date": "2015-03-31T17:00:43+00:00",
"revision_history": [
{
"date": "2015-03-31T17:00:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:17:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Data Virtualization 6.0",
"product": {
"name": "Red Hat JBoss Data Virtualization 6.0",
"product_id": "Red Hat JBoss Data Virtualization 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_data_virtualization:6.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Data Virtualization"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-4002",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2013-10-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1019176"
}
],
"notes": [
{
"category": "description",
"text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4002"
},
{
"category": "external",
"summary": "RHBZ#1019176",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"
}
],
"release_date": "2013-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3481",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1105242"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3481"
},
{
"category": "external",
"summary": "RHBZ#1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Data Virtualization 6.0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-31T17:00:43+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.",
"product_ids": [
"Red Hat JBoss Data Virtualization 6.0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0765"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Data Virtualization 6.0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
}
]
}
RHSA-2015:0983
Vulnerability from csaf_redhat - Published: 2015-05-12 16:37 - Updated: 2026-01-28 22:38It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated tomcat packages that fix one security issue are now available\nfor Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the ChunkedInputFilter in Tomcat did not fail\nsubsequent attempts to read input after malformed chunked encoding was\ndetected. A remote attacker could possibly use this flaw to make Tomcat\nprocess part of the request body as new request, or cause a denial of\nservice. (CVE-2014-0227)\n\nAll Tomcat 7 users are advised to upgrade to these updated packages, which\ncontain a backported patch to correct this issue. After installing this\nupdate, the tomcat service will be restarted automatically.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0983",
"url": "https://access.redhat.com/errata/RHSA-2015:0983"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0983.json"
}
],
"title": "Red Hat Security Advisory: tomcat security update",
"tracking": {
"current_release_date": "2026-01-28T22:38:27+00:00",
"generator": {
"date": "2026-01-28T22:38:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.16"
}
},
"id": "RHSA-2015:0983",
"initial_release_date": "2015-05-12T16:37:36+00:00",
"revision_history": [
{
"date": "2015-05-12T16:37:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-05-12T16:37:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-28T22:38:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsvc@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-javadoc@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-docs-webapp@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-webapps@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsp-2.2-api@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-el-2.2-api@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-servlet-3.0-api@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-admin-webapps@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"product": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"product_id": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-lib@7.0.54-2.el7_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-lib@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsp-2.2-api@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-servlet-3.0-api@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-admin-webapps@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-el-2.2-api@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-webapps@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-javadoc@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-docs-webapp@7.0.54-2.ael7b_1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"product": {
"name": "tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"product_id": "tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsvc@7.0.54-2.ael7b_1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat-0:7.0.54-2.el7_1.src",
"product": {
"name": "tomcat-0:7.0.54-2.el7_1.src",
"product_id": "tomcat-0:7.0.54-2.el7_1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.54-2.el7_1?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat-0:7.0.54-2.ael7b_1.src",
"product": {
"name": "tomcat-0:7.0.54-2.ael7b_1.src",
"product_id": "tomcat-0:7.0.54-2.ael7b_1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.54-2.ael7b_1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Client-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.ael7b_1.src",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Server-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.ael7b_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.ael7b_1.src",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"relates_to_product_reference": "7Server-optional-LE-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.54-2.el7_1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src"
},
"product_reference": "tomcat-0:7.0.54-2.el7_1.src",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-lib-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.54-2.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"relates_to_product_reference": "7Workstation-optional-7.1.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Client-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Client-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7ComputeNode-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7ComputeNode-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Server-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src",
"7Server-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Server-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src",
"7Server-optional-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Workstation-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Workstation-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-12T16:37:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Client-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Client-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7ComputeNode-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7ComputeNode-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Server-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src",
"7Server-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Server-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src",
"7Server-optional-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Workstation-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Workstation-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0983"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Client-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Client-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Client-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Client-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7ComputeNode-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7ComputeNode-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7ComputeNode-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Server-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Server-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src",
"7Server-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Server-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Server-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-0:7.0.54-2.ael7b_1.src",
"7Server-optional-LE-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-javadoc-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-jsvc-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-lib-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.ael7b_1.noarch",
"7Server-optional-LE-7.1.Z:tomcat-webapps-0:7.0.54-2.ael7b_1.noarch",
"7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Workstation-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-0:7.0.54-2.el7_1.src",
"7Workstation-optional-7.1.Z:tomcat-admin-webapps-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-docs-webapp-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-el-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-javadoc-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-jsp-2.2-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-jsvc-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-lib-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-servlet-3.0-api-0:7.0.54-2.el7_1.noarch",
"7Workstation-optional-7.1.Z:tomcat-webapps-0:7.0.54-2.el7_1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
}
]
}
RHSA-2015:0991
Vulnerability from csaf_redhat - Published: 2015-05-12 18:20 - Updated: 2026-01-28 22:38It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated tomcat6 packages that fix one security issue and one bug are now\navailable for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the ChunkedInputFilter in Tomcat did not fail\nsubsequent attempts to read input after malformed chunked encoding was\ndetected. A remote attacker could possibly use this flaw to make Tomcat\nprocess part of the request body as new request, or cause a denial of\nservice. (CVE-2014-0227)\n\nThis update also fixes the following bug:\n\n* Before this update, the tomcat6 init script did not try to kill the\ntomcat process if an attempt to stop it was unsuccessful, which would\nprevent tomcat from restarting properly. The init script was modified to\ncorrect this issue. (BZ#1207048)\n\nAll Tomcat 6 users are advised to upgrade to these updated packages, which\ncorrect these issues. Tomcat must be restarted for this update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0991",
"url": "https://access.redhat.com/errata/RHSA-2015:0991"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0991.json"
}
],
"title": "Red Hat Security Advisory: tomcat6 security and bug fix update",
"tracking": {
"current_release_date": "2026-01-28T22:38:27+00:00",
"generator": {
"date": "2026-01-28T22:38:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.16"
}
},
"id": "RHSA-2015:0991",
"initial_release_date": "2015-05-12T18:20:15+00:00",
"revision_history": [
{
"date": "2015-05-12T18:20:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-05-12T18:20:15+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-28T22:38:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-javadoc@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-debuginfo@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-webapps@6.0.24-83.el6_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"product": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"product_id": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-lib@6.0.24-83.el6_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-0:6.0.24-83.el6_6.src",
"product": {
"name": "tomcat6-0:6.0.24-83.el6_6.src",
"product_id": "tomcat6-0:6.0.24-83.el6_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.24-83.el6_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-debuginfo@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-javadoc@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-webapps@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-lib@6.0.24-83.el6_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.24-83.el6_6.i686",
"product": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686",
"product_id": "tomcat6-0:6.0.24-83.el6_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.24-83.el6_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-lib@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-debuginfo@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-webapps@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-javadoc@6.0.24-83.el6_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"product": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"product_id": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-83.el6_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-lib@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-javadoc@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-webapps@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-debuginfo@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-83.el6_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"product": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"product_id": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.24-83.el6_6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Client-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Server-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.src",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
},
"product_reference": "tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.6.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-12T18:20:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0991"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Client-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Client-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Client-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6ComputeNode-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6ComputeNode-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6ComputeNode-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Server-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Server-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Server-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Workstation-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.src",
"6Workstation-optional-6.6.z:tomcat6-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-admin-webapps-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-debuginfo-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-docs-webapp-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-el-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-javadoc-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-jsp-2.1-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-lib-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-servlet-2.5-api-0:6.0.24-83.el6_6.x86_64",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.i686",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.ppc64",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.s390x",
"6Workstation-optional-6.6.z:tomcat6-webapps-0:6.0.24-83.el6_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
}
]
}
RHSA-2015:1009
Vulnerability from csaf_redhat - Published: 2015-05-14 15:14 - Updated: 2026-05-14 22:17It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was discovered that bouncycastle leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that when Tomcat / JBoss Web processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat / JBoss Web would incorrectly handle the request. A remote attacker could use this flaw to poison a web cache, perform cross-site scripting (XSS) attacks, or obtain sensitive information from other requests.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user's browser.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that XStream could deserialize arbitrary user-supplied XML content, representing objects of any type. A remote attacker able to pass XML to XStream could use this flaw to perform a variety of attacks, including remote code execution in the context of the server running the XStream application.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other applications deployed on the same system, disclose privileged information, and in certain cases allow arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
In Red Hat JBoss Enterprise Application Platform, when running under a security manager, it was possible for deployed code to get access to the Modular Service Container (MSC) service registry without any permission checks. This could allow malicious deployments to modify the internal state of the server in various ways.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the SecurityTokenService (STS), provided as a part of Apache CXF, could under certain circumstances accept invalid SAML tokens as valid. A remote attacker could use a specially crafted SAML token to gain access to an application that uses STS for validation of SAML tokens.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter an infinite loop when processing such an incoming request.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the security audit functionality logged request parameters in plain text. This may have caused passwords to be included in the audit log files when using BASIC or FORM-based authentication. A local attacker with access to audit log files could possibly use this flaw to obtain application or server authentication credentials.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that certain malformed requests caused RichFaces to leak memory. A remote, unauthenticated attacker could use this flaw to send a large number of malformed requests to a RichFaces application that uses the Atmosphere framework, leading to a denial of service (excessive memory consumption) on the application server.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to perform actions which would otherwise be restricted.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the secure processing feature of Xalan-Java had insufficient restrictions defined for certain properties and features. A remote attacker able to provide Extensible Stylesheet Language Transformations (XSLT) content to be processed by an application using Xalan-Java could use this flaw to bypass the intended constraints of the secure processing feature. Depending on the components available in the classpath, this could lead to arbitrary remote code execution in the context of the application server running the application that uses Xalan-Java.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
A denial of service flaw was found in the way Apache CXF created error messages for certain POST requests. A remote attacker could send a specially crafted request which, when processed by an application using Apache CXF, could consume an excessive amount of memory on the system, possibly triggering an Out Of Memory (OOM) error.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of disk space, possibly causing a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that Apache POI would resolve entities in OOXML documents. A remote attacker able to supply OOXML documents that are parsed by Apache POI could use this flaw to read files accessible to the user running the application server, and potentially perform more advanced XML External Entity (XXE) attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that Apache POI would expand an unlimited number of entities in OOXML documents. A remote attacker able to supply OOXML documents that are parsed by Apache POI could use this flaw to trigger a denial of service attack via excessive CPU and memory consumption.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not accessible to them.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher's attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Portal 6.2
Red Hat / Red Hat JBoss Portal
|
cpe:/a:redhat:jboss_enterprise_portal_platform:6.2
|
— |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Portal 6.2.0, which fixes multiple security issues and\nvarious bugs, is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.\n\nRed Hat JBoss Portal is the open source implementation of the Java EE suite\nof services and Portal services running atop Red Hat JBoss Enterprise\nApplication Platform.",
"title": "Topic"
},
{
"category": "general",
"text": "This release of Red Hat JBoss Portal 6.2.0 serves as a replacement for\nRed Hat JBoss BPM Suite 6.1.1, and includes bug fixes and enhancements.\nRefer to the Red Hat JBoss BPM Suite 6.2.0 Release Notes for information on\nthe most significant of these changes. The Release Notes are available at\nhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Portal/\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass\n\nCVE-2013-1624 bouncycastle: TLS CBC padding timing attack\n\nCVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws\nhandlers\n\nCVE-2013-4286 JBossWeb: multiple content-length header poisoning flaws\n\nCVE-2013-5855 Mojarra JSF2: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2013-7285 XStream: remote code execution due to insecure XML\ndeserialization\n\nCVE-2014-0005 PicketBox/JBossSX: Security domain authentication\nconfiguration modifiable by application\n\nCVE-2014-0018 JBoss AS Server: Unchecked access to MSC Service Registry\nunder JSM\n\nCVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid\nSAML Tokens as valid\n\nCVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a\nSymmetric EncryptBeforeSigning policy\n\nCVE-2014-0050 JBossWeb: denial of service due to too-small buffer size used\nbt MultipartStream\n\nCVE-2014-0058 Red Hat JBoss EAP 6: Plain text password logging\n\nCVE-2014-0059 PicketBox/JBossSX: World readable audit.log file\n\nCVE-2014-0075 JBossWeb: Limited DoS in chunked transfer encoding input\nfilter\n\nCVE-2014-0086 JBoss RichFaces: remote denial of service via memory\nexhaustion\n\nCVE-2014-0093 Red Hat JBoss EAP 6: JSM policy not respected by deployed\napplications\n\nCVE-2014-0096 JBossWeb: XXE vulnerability via user supplied XSLTs\n\nCVE-2014-0099 JBossWeb: Request smuggling via malicious content length\nheader\n\nCVE-2014-0107 Xalan-Java: insufficient constraints in secure processing\nfeature (oCERT-2014-002)\n\nCVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause\nOOM errors\n\nCVE-2014-0110 Apache CXF: Large invalid content fills temporary space\n\nCVE-2014-0119 JBossWeb: XML parser hijack by malicious web application\n\nCVE-2014-0193 Netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 JBossWeb: Limited DoS in chunked transfer encoding input\nfilter\n\nCVE-2014-0245 GateIn WSRP: Information disclosure via unsafe concurrency\nhandling in interceptor\n\nCVE-2014-3472 JBoss AS Controller: Invalid EJB caller role check\n\nCVE-2014-3481 JBoss AS JAX RS Integration: Information disclosure via XML\nXXE\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2014-3574 Apache POI: entity expansion (billion laughs) flaw\n\nCVE-2014-3529 Apache POI: XXE flaw\n\nCVE-2014-3577 Apache HttpComponents incomplete fix for CVE-2012-6153\n\nCVE-2014-3586 JBoss AS CLI: Insecure default permissions on history file\n\nCVE-2014-4172 Cas-client: Bypass of security constraints via URL parameter\ninjection\n\nRed Hat would like to thank James Roper of Typesafe for reporting\nCVE-2014-0193, CA Technologies for reporting CVE-2014-3472, and Alexander\nPapadakis for reporting CVE-2014-3530. The CVE-2013-2133 issue was\ndiscovered by Richard Opalka and Arun Neelicattu of Red Hat, the\nCVE-2014-0005 issue was discovered by Josef Cacek of the Red Hat JBoss EAP\nQuality Engineering team, the CVE-2014-0018 issue was discovered by Stuart\nDouglas of Red Hat, the CVE-2014-3481 issue was discovered by the Red Hat\nJBoss Enterprise Application Platform QE team, the CVE-2014-0075 and\nCVE-2014-3490 issues were discovered by David Jorm of Red Hat Product\nSecurity, and the CVE-2014-0093 issue was discovered by Josef Cacek of the\nRed Hat JBoss EAP Quality Engineering team.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1009",
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal\u0026downloadType=distributions",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal\u0026downloadType=distributions"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Portal/",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Portal/"
},
{
"category": "external",
"summary": "908428",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908428"
},
{
"category": "external",
"summary": "969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "1051277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051277"
},
{
"category": "external",
"summary": "1052783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052783"
},
{
"category": "external",
"summary": "1058454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1058454"
},
{
"category": "external",
"summary": "1062337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1062337"
},
{
"category": "external",
"summary": "1063641",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063641"
},
{
"category": "external",
"summary": "1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "1067268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1067268"
},
{
"category": "external",
"summary": "1069921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069921"
},
{
"category": "external",
"summary": "1070046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1070046"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1080248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080248"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "1101303",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101303"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "1126687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1126687"
},
{
"category": "external",
"summary": "1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "1131350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131350"
},
{
"category": "external",
"summary": "1138135",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138135"
},
{
"category": "external",
"summary": "1138140",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138140"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1009.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Portal 6.2.0 update",
"tracking": {
"current_release_date": "2026-05-14T22:17:37+00:00",
"generator": {
"date": "2026-05-14T22:17:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2015:1009",
"initial_release_date": "2015-05-14T15:14:47+00:00",
"revision_history": [
{
"date": "2015-05-14T15:14:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-02-20T12:35:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:17:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Portal 6.2",
"product": {
"name": "Red Hat JBoss Portal 6.2",
"product_id": "Red Hat JBoss Portal 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_portal_platform:6.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Portal"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-6153",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2012-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129916"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-6153"
},
{
"category": "external",
"summary": "RHBZ#1129916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153"
}
],
"release_date": "2014-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix"
},
{
"cve": "CVE-2013-1624",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2013-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "908428"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that bouncycastle leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: TLS CBC padding timing attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-1624"
},
{
"category": "external",
"summary": "RHBZ#908428",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908428"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-1624",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1624"
},
{
"category": "external",
"summary": "http://www.isg.rhul.ac.uk/tls/",
"url": "http://www.isg.rhul.ac.uk/tls/"
},
{
"category": "external",
"summary": "http://www.isg.rhul.ac.uk/tls/TLStiming.pdf",
"url": "http://www.isg.rhul.ac.uk/tls/TLStiming.pdf"
}
],
"release_date": "2013-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bouncycastle: TLS CBC padding timing attack"
},
{
"acknowledgments": [
{
"names": [
"Richard Opalka"
]
},
{
"names": [
"Arun Neelicattu"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-2133",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2013-06-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "969924"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "WS: EJB3 role restrictions are not applied to jaxws handlers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-2133"
},
{
"category": "external",
"summary": "RHBZ#969924",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-2133",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2133"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133"
}
],
"release_date": "2013-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "WS: EJB3 role restrictions are not applied to jaxws handlers"
},
{
"cve": "CVE-2013-4286",
"discovery_date": "2014-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1069921"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when Tomcat / JBoss Web processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat / JBoss Web would incorrectly handle the request. A remote attacker could use this flaw to poison a web cache, perform cross-site scripting (XSS) attacks, or obtain sensitive information from other requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: multiple content-length header poisoning flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4286"
},
{
"category": "external",
"summary": "RHBZ#1069921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069921"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4286",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4286"
}
],
"release_date": "2014-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat: multiple content-length header poisoning flaws"
},
{
"cve": "CVE-2013-5855",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2014-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1065139"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5855"
},
{
"category": "external",
"summary": "RHBZ#1065139",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855"
},
{
"category": "external",
"summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209",
"url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209"
}
],
"release_date": "2014-02-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions"
},
{
"cve": "CVE-2013-7285",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2013-12-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1051277"
}
],
"notes": [
{
"category": "description",
"text": "It was found that XStream could deserialize arbitrary user-supplied XML content, representing objects of any type. A remote attacker able to pass XML to XStream could use this flaw to perform a variety of attacks, including remote code execution in the context of the server running the XStream application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "XStream: remote code execution due to insecure XML deserialization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-7285"
},
{
"category": "external",
"summary": "RHBZ#1051277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-7285",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7285"
},
{
"category": "external",
"summary": "http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html",
"url": "http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html"
},
{
"category": "external",
"summary": "http://xstream.codehaus.org/security.html",
"url": "http://xstream.codehaus.org/security.html"
},
{
"category": "external",
"summary": "https://securityblog.redhat.com/2014/01/23/java-deserialization-flaws-part-2-xml-deserialization/",
"url": "https://securityblog.redhat.com/2014/01/23/java-deserialization-flaws-part-2-xml-deserialization/"
}
],
"release_date": "2013-12-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "XStream: remote code execution due to insecure XML deserialization"
},
{
"acknowledgments": [
{
"names": [
"Josef Cacek"
],
"organization": "Red Hat JBoss EAP Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0005",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2014-01-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1049736"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other applications deployed on the same system, disclose privileged information, and in certain cases allow arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0005"
},
{
"category": "external",
"summary": "RHBZ#1049736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0005"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0005"
}
],
"release_date": "2014-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application"
},
{
"acknowledgments": [
{
"names": [
"Stuart Douglas"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0018",
"discovery_date": "2014-01-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1052783"
}
],
"notes": [
{
"category": "description",
"text": "In Red Hat JBoss Enterprise Application Platform, when running under a security manager, it was possible for deployed code to get access to the Modular Service Container (MSC) service registry without any permission checks. This could allow malicious deployments to modify the internal state of the server in various ways.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jboss-as-server: Unchecked access to MSC Service Registry under JSM",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0018"
},
{
"category": "external",
"summary": "RHBZ#1052783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0018",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0018"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0018",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0018"
}
],
"release_date": "2014-01-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jboss-as-server: Unchecked access to MSC Service Registry under JSM"
},
{
"cve": "CVE-2014-0034",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093529"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the SecurityTokenService (STS), provided as a part of Apache CXF, could under certain circumstances accept invalid SAML tokens as valid. A remote attacker could use a specially crafted SAML token to gain access to an application that uses STS for validation of SAML tokens.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0034"
},
{
"category": "external",
"summary": "RHBZ#1093529",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0034",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0034"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid"
},
{
"cve": "CVE-2014-0035",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093530"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0035"
},
{
"category": "external",
"summary": "RHBZ#1093530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0035",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy"
},
{
"cve": "CVE-2014-0050",
"discovery_date": "2014-02-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1062337"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter an infinite loop when processing such an incoming request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0050"
},
{
"category": "external",
"summary": "RHBZ#1062337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1062337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0050",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0050"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0050",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0050"
}
],
"release_date": "2014-02-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream"
},
{
"cve": "CVE-2014-0058",
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063641"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security audit functionality logged request parameters in plain text. This may have caused passwords to be included in the audit log files when using BASIC or FORM-based authentication. A local attacker with access to audit log files could possibly use this flaw to obtain application or server authentication credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "EAP6: Plain text password logging during security audit",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0058"
},
{
"category": "external",
"summary": "RHBZ#1063641",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063641"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0058",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0058"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0058",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0058"
}
],
"release_date": "2014-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "EAP6: Plain text password logging during security audit"
},
{
"cve": "CVE-2014-0059",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2014-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1063642"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JBossSX/PicketBox: World readable audit.log file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0059"
},
{
"category": "external",
"summary": "RHBZ#1063642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "JBossSX/PicketBox: World readable audit.log file"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0086",
"discovery_date": "2014-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1067268"
}
],
"notes": [
{
"category": "description",
"text": "It was found that certain malformed requests caused RichFaces to leak memory. A remote, unauthenticated attacker could use this flaw to send a large number of malformed requests to a RichFaces application that uses the Atmosphere framework, leading to a denial of service (excessive memory consumption) on the application server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RichFaces: remote denial of service via memory exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0086"
},
{
"category": "external",
"summary": "RHBZ#1067268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1067268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0086",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0086"
}
],
"release_date": "2014-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RichFaces: remote denial of service via memory exhaustion"
},
{
"acknowledgments": [
{
"names": [
"Josef Cacek"
],
"organization": "Red Hat JBoss EAP Quality Engineering team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0093",
"discovery_date": "2014-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1070046"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to perform actions which would otherwise be restricted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "6: JSM policy not respected by deployed applications",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0093"
},
{
"category": "external",
"summary": "RHBZ#1070046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1070046"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0093",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0093"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0093",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0093"
}
],
"release_date": "2014-02-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "6: JSM policy not respected by deployed applications"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
},
{
"cve": "CVE-2014-0107",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2014-03-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1080248"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the secure processing feature of Xalan-Java had insufficient restrictions defined for certain properties and features. A remote attacker able to provide Extensible Stylesheet Language Transformations (XSLT) content to be processed by an application using Xalan-Java could use this flaw to bypass the intended constraints of the secure processing feature. Depending on the components available in the classpath, this could lead to arbitrary remote code execution in the context of the application server running the application that uses Xalan-Java.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Xalan-Java: insufficient constraints in secure processing feature",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0107"
},
{
"category": "external",
"summary": "RHBZ#1080248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0107",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0107"
},
{
"category": "external",
"summary": "http://www.ocert.org/advisories/ocert-2014-002.html",
"url": "http://www.ocert.org/advisories/ocert-2014-002.html"
}
],
"release_date": "2014-03-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Xalan-Java: insufficient constraints in secure processing feature"
},
{
"cve": "CVE-2014-0109",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093526"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way Apache CXF created error messages for certain POST requests. A remote attacker could send a specially crafted request which, when processed by an application using Apache CXF, could consume an excessive amount of memory on the system, possibly triggering an Out Of Memory (OOM) error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: HTML content posted to SOAP endpoint could cause OOM errors",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0109"
},
{
"category": "external",
"summary": "RHBZ#1093526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0109",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: HTML content posted to SOAP endpoint could cause OOM errors"
},
{
"cve": "CVE-2014-0110",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1093527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of disk space, possibly causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: Large invalid content could cause temporary space to fill",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0110"
},
{
"category": "external",
"summary": "RHBZ#1093527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0110",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "CXF: Large invalid content could cause temporary space to fill"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"cve": "CVE-2014-0245",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"discovery_date": "2014-05-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1101303"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "WSRP: Information disclosure via unsafe concurrency handling in interceptor",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0245"
},
{
"category": "external",
"summary": "RHBZ#1101303",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101303"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0245",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0245"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0245",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0245"
}
],
"release_date": "2015-03-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "WSRP: Information disclosure via unsafe concurrency handling in interceptor"
},
{
"acknowledgments": [
{
"names": [
"CA Technologies"
]
}
],
"cve": "CVE-2014-3472",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2014-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103815"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Invalid EJB caller role check implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3472"
},
{
"category": "external",
"summary": "RHBZ#1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3472",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472"
}
],
"release_date": "2014-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Invalid EJB caller role check implementation"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3481",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1105242"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3481"
},
{
"category": "external",
"summary": "RHBZ#1105242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)"
},
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3490",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1107901"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTEasy: XXE via parameter entities",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3490"
},
{
"category": "external",
"summary": "RHBZ#1107901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490"
}
],
"release_date": "2014-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTEasy: XXE via parameter entities"
},
{
"cve": "CVE-2014-3529",
"discovery_date": "2014-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1138135"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache POI would resolve entities in OOXML documents. A remote attacker able to supply OOXML documents that are parsed by Apache POI could use this flaw to read files accessible to the user running the application server, and potentially perform more advanced XML External Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-poi: XML eXternal Entity (XXE) flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that CVE-2014-3529 is not exploitable by default in JBoss Portal Platform as provided by Red Hat. This flaw would only be exploitable if the Apache POI library provided by JBoss Portal Platform were used by a custom application to process user-supplied XML documents.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3529"
},
{
"category": "external",
"summary": "RHBZ#1138135",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138135"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3529",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3529"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3529",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3529"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "apache-poi: XML eXternal Entity (XXE) flaw"
},
{
"acknowledgments": [
{
"names": [
"Alexander Papadakis"
]
}
],
"cve": "CVE-2014-3530",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1112987"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PicketLink: XXE via insecure DocumentBuilderFactory usage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"category": "external",
"summary": "RHBZ#1112987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530"
}
],
"release_date": "2014-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "PicketLink: XXE via insecure DocumentBuilderFactory usage"
},
{
"cve": "CVE-2014-3574",
"discovery_date": "2014-09-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1138140"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache POI would expand an unlimited number of entities in OOXML documents. A remote attacker able to supply OOXML documents that are parsed by Apache POI could use this flaw to trigger a denial of service attack via excessive CPU and memory consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-poi: entity expansion (billion laughs) flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has determined that CVE-2014-3574 is not exploitable by default in JBoss Portal Platform as provided by Red Hat. This flaw would only be exploitable if the Apache POI library provided by JBoss Portal Platform were used by a custom application to process user-supplied XML documents.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3574"
},
{
"category": "external",
"summary": "RHBZ#1138140",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1138140"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3574",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3574"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3574",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3574"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "apache-poi: entity expansion (billion laughs) flaw"
},
{
"cve": "CVE-2014-3577",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"discovery_date": "2014-08-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1129074"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3577"
},
{
"category": "external",
"summary": "RHBZ#1129074",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577"
}
],
"release_date": "2014-08-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix"
},
{
"cve": "CVE-2014-3586",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2014-07-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1126687"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user\u0027s home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not accessible to them.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "CLI: Insecure default permissions on history file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3586"
},
{
"category": "external",
"summary": "RHBZ#1126687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1126687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3586",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3586"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3586",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3586"
}
],
"release_date": "2015-03-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "CLI: Insecure default permissions on history file"
},
{
"cve": "CVE-2014-4172",
"discovery_date": "2014-08-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1131350"
}
],
"notes": [
{
"category": "description",
"text": "A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cas-client: Bypass of security constraints via URL parameter injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-4172"
},
{
"category": "external",
"summary": "RHBZ#1131350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131350"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-4172",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-4172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4172"
},
{
"category": "external",
"summary": "https://www.mail-archive.com/cas-user@lists.jasig.org/msg17338.html",
"url": "https://www.mail-archive.com/cas-user@lists.jasig.org/msg17338.html"
}
],
"release_date": "2014-08-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cas-client: Bypass of security constraints via URL parameter injection"
},
{
"cve": "CVE-2014-7839",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-11-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1165328"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "RESTeasy: External entities expanded by DocumentProvider",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7839"
},
{
"category": "external",
"summary": "RHBZ#1165328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7839"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839"
}
],
"release_date": "2014-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "RESTeasy: External entities expanded by DocumentProvider"
},
{
"cve": "CVE-2015-0226",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191446"
}
],
"notes": [
{
"category": "description",
"text": "It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0226"
},
{
"category": "external",
"summary": "RHBZ#1191446",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)"
},
{
"cve": "CVE-2015-0227",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2015-02-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191451"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Portal 6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-0227"
},
{
"category": "external",
"summary": "RHBZ#1191451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227"
}
],
"release_date": "2015-02-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-05-14T15:14:47+00:00",
"details": "All users of Red Hat JBoss Portal 6.1.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Portal 6.2.0.\n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up all\napplications deployed on JBoss Enterprise Portal Platform, along with all\ncustomized configuration files, and any databases and database settings.",
"product_ids": [
"Red Hat JBoss Portal 6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1009"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Portal 6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property"
}
]
}
SUSE-SU-2015:1337-1
Vulnerability from csaf_suse - Published: 2013-08-02 13:29 - Updated: 2013-08-02 13:29| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat6",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update of tomcat6 fixes:\n\n * apache-tomcat-CVE-2012-3544.patch (bnc#831119)\n * use chown --no-dereference to prevent symlink attacks on log\n (bnc#822177#c7/prevents CVE-2013-1976)\n * Fix tomcat init scripts generating malformed classpath (\n http://youtrack.jetbrains.com/issue/JT-18545\n \u003chttp://youtrack.jetbrains.com/issue/JT-18545\u003e ) bnc#804992 (patch\n from m407)\n * fix a typo in initscript (bnc#768772 )\n * copy all shell scripts (bnc#818948)\n\nSecurity Issue references:\n\n * CVE-2012-3544\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3544\u003e\n * CVE-2013-1976\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976\u003e\n * CVE-2012-0022\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0022\u003e\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp3-tomcat6",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1337-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1337-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151337-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1337-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-August/001523.html"
},
{
"category": "self",
"summary": "SUSE Bug 768772",
"url": "https://bugzilla.suse.com/768772"
},
{
"category": "self",
"summary": "SUSE Bug 804992",
"url": "https://bugzilla.suse.com/804992"
},
{
"category": "self",
"summary": "SUSE Bug 818948",
"url": "https://bugzilla.suse.com/818948"
},
{
"category": "self",
"summary": "SUSE Bug 822177",
"url": "https://bugzilla.suse.com/822177"
},
{
"category": "self",
"summary": "SUSE Bug 831119",
"url": "https://bugzilla.suse.com/831119"
},
{
"category": "self",
"summary": "SUSE Bug 906152",
"url": "https://bugzilla.suse.com/906152"
},
{
"category": "self",
"summary": "SUSE Bug 917127",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "self",
"summary": "SUSE Bug 918195",
"url": "https://bugzilla.suse.com/918195"
},
{
"category": "self",
"summary": "SUSE Bug 926762",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "self",
"summary": "SUSE Bug 931442",
"url": "https://bugzilla.suse.com/931442"
},
{
"category": "self",
"summary": "SUSE Bug 932698",
"url": "https://bugzilla.suse.com/932698"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-0022 page",
"url": "https://www.suse.com/security/cve/CVE-2012-0022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1976 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0227 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0230 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7810 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7810/"
}
],
"title": "Security update for tomcat6",
"tracking": {
"current_release_date": "2013-08-02T13:29:14Z",
"generator": {
"date": "2013-08-02T13:29:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1337-1",
"initial_release_date": "2013-08-02T13:29:14Z",
"revision_history": [
{
"date": "2013-08-02T13:29:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-lib-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-webapps-6.0.18-20.35.42.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-0022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0022"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0022",
"url": "https://www.suse.com/security/cve/CVE-2012-0022"
},
{
"category": "external",
"summary": "SUSE Bug 742477 for CVE-2012-0022",
"url": "https://bugzilla.suse.com/742477"
},
{
"category": "external",
"summary": "SUSE Bug 745056 for CVE-2012-0022",
"url": "https://bugzilla.suse.com/745056"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2012-0022"
},
{
"cve": "CVE-2012-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3544"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3544",
"url": "https://www.suse.com/security/cve/CVE-2012-3544"
},
{
"category": "external",
"summary": "SUSE Bug 822177 for CVE-2012-3544",
"url": "https://bugzilla.suse.com/822177"
},
{
"category": "external",
"summary": "SUSE Bug 831119 for CVE-2012-3544",
"url": "https://bugzilla.suse.com/831119"
},
{
"category": "external",
"summary": "SUSE Bug 865746 for CVE-2012-3544",
"url": "https://bugzilla.suse.com/865746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "low"
}
],
"title": "CVE-2012-3544"
},
{
"cve": "CVE-2013-1976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1976"
}
],
"notes": [
{
"category": "general",
"text": "The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1976",
"url": "https://www.suse.com/security/cve/CVE-2013-1976"
},
{
"category": "external",
"summary": "SUSE Bug 822177 for CVE-2013-1976",
"url": "https://bugzilla.suse.com/822177"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2013-1976"
},
{
"cve": "CVE-2014-0227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0227"
}
],
"notes": [
{
"category": "general",
"text": "java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0227",
"url": "https://www.suse.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "SUSE Bug 917127 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2014-0227"
},
{
"cve": "CVE-2014-0230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0230"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0230",
"url": "https://www.suse.com/security/cve/CVE-2014-0230"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "important"
}
],
"title": "CVE-2014-0230"
},
{
"cve": "CVE-2014-7810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7810"
}
],
"notes": [
{
"category": "general",
"text": "The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7810",
"url": "https://www.suse.com/security/cve/CVE-2014-7810"
},
{
"category": "external",
"summary": "SUSE Bug 931442 for CVE-2014-7810",
"url": "https://bugzilla.suse.com/931442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2014-7810"
}
]
}
SUSE-SU-2015:1565-1
Vulnerability from csaf_suse - Published: 2015-09-11 01:45 - Updated: 2015-09-11 01:45| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat6",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for Tomcat fixes the following security issues:\n\n- CVE-2014-7810: Security manager bypass via EL expressions. (bsc#931442)\nIt was found that the expression language resolver evaluated expressions within a\nprivileged code section. A malicious web application could have used this flaw to\nbypass security manager protections.\n\n- CVE-2014-0227: Limited DoS in chunked transfer encoding input filter. (bsc#917127)\nIt was discovered that the ChunkedInputFilter implementation did not fail subsequent\nattempts to read input early enough. A remote attacker could have used this flaw to\nperform a denial of service attack, by streaming an unlimited quantity of data,\nleading to consumption of server resources.\n\n- CVE-2014-0230: Non-persistent DoS attack by feeding data by aborting an upload\nIt was possible for a remote attacker to trigger a non-persistent DoS attack by\nfeeding data by aborting an upload. (bsc#926762)\n\nAdditionally, the following non-security issues have been fixed:\n\n- Fix rights of all files within /usr/share/tomcat6/bin. (bsc#906152)\n- Don\u0027t overwrite /var/run/tomcat6.pid when Tomcat is already running. (bsc#934219)\n- Miscellaneous fixes and improvements to Tomcat\u0027s init script. (bsc#932698)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp4-tomcat6-12092",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1565-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1565-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151565-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1565-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-September/001594.html"
},
{
"category": "self",
"summary": "SUSE Bug 906152",
"url": "https://bugzilla.suse.com/906152"
},
{
"category": "self",
"summary": "SUSE Bug 917127",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "self",
"summary": "SUSE Bug 926762",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "self",
"summary": "SUSE Bug 931442",
"url": "https://bugzilla.suse.com/931442"
},
{
"category": "self",
"summary": "SUSE Bug 932698",
"url": "https://bugzilla.suse.com/932698"
},
{
"category": "self",
"summary": "SUSE Bug 934219",
"url": "https://bugzilla.suse.com/934219"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0227 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0230 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7810 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7810/"
}
],
"title": "Security update for tomcat6",
"tracking": {
"current_release_date": "2015-09-11T01:45:16Z",
"generator": {
"date": "2015-09-11T01:45:16Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1565-1",
"initial_release_date": "2015-09-11T01:45:16Z",
"revision_history": [
{
"date": "2015-09-11T01:45:16Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-javadoc-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-lib-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-lib-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-lib-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-webapps-6.0.41-0.47.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0227"
}
],
"notes": [
{
"category": "general",
"text": "java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0227",
"url": "https://www.suse.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "SUSE Bug 917127 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-11T01:45:16Z",
"details": "moderate"
}
],
"title": "CVE-2014-0227"
},
{
"cve": "CVE-2014-0230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0230"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0230",
"url": "https://www.suse.com/security/cve/CVE-2014-0230"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-11T01:45:16Z",
"details": "important"
}
],
"title": "CVE-2014-0230"
},
{
"cve": "CVE-2014-7810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7810"
}
],
"notes": [
{
"category": "general",
"text": "The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7810",
"url": "https://www.suse.com/security/cve/CVE-2014-7810"
},
{
"category": "external",
"summary": "SUSE Bug 931442 for CVE-2014-7810",
"url": "https://bugzilla.suse.com/931442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-11T01:45:16Z",
"details": "moderate"
}
],
"title": "CVE-2014-7810"
}
]
}
WID-SEC-W-2023-0451
Vulnerability from csaf_certbund - Published: 2015-02-16 23:00 - Updated: 2023-02-21 23:00Es existiert eine Schwachstelle in Apache Tomcat in der "ChunkedInputFilter" Implementierung. Ein Angreifer kann durch Senden geeignet manipulierter Anfragen an einen betroffenen Server einen Denial of Service Zustand herbeiführen oder dafür sorgen, dass Teile ("chunks") einer Anfrage als eine weitere Anfrage behandelt werden ("Request Smuggling").
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux Server v.7
Red Hat
|
cpe:/o:redhat:enterprise_linux:7::server
|
— | |
|
Red Hat Enterprise Linux Desktop v.7
Red Hat
|
cpe:/o:redhat:enterprise_linux_desktop:7::desktop
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Red Hat Enterprise Linux Workstation v.7
Red Hat
|
cpe:/o:redhat:enterprise_linux_workstation:7
|
— | |
|
HPE HP-UX
HPE
|
cpe:/o:hp:hp-ux:-
|
— | |
|
Open Source CentOS 7
Open Source
|
cpe:/o:centos:centos:7
|
— | |
|
SUSE Linux Enterprise Server
SUSE
|
cpe:/o:suse:linux_enterprise_server:11:sp3
|
— | |
|
Red Hat Enterprise Linux HPC Node v.7
Red Hat
|
cpe:/o:redhat:enterprise_linux_hpc_node:7
|
— | |
|
Blue Coat Director
Blue Coat
|
cpe:/a:bluecoat:director:-
|
— | |
|
IBM FlashSystem 840
IBM
|
cpe:/a:ibm:flashsystem:840
|
— |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Apache Tomcat ist ein Web-Applikationsserver f\u00fcr verschiedene Plattformen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Denial of Service Angriff oder \"Request Smuggling\" durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0451 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2015/wid-sec-w-2023-0451.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0451 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0451"
},
{
"category": "external",
"summary": "IBM Security Bulletin 690395 vom 2023-02-22",
"url": "https://www.ibm.com/support/pages/node/690395"
},
{
"category": "external",
"summary": "National Vulnerability Database - CVE-2014-0227 vom 2015-02-15",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0227"
},
{
"category": "external",
"summary": "Mandriva Security Advisory MDVSA-2015:084 vom 2015-03-28",
"url": "http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A084/"
},
{
"category": "external",
"summary": "Red Hat Advisory RHSA-2015:0983-1 vom 2015-05-12",
"url": "https://rhn.redhat.com/errata/RHSA-2015-0983.html"
},
{
"category": "external",
"summary": "CentOS Errata and Security Advisory CESA-2015:0983 vom 2015-05-12",
"url": "http://centos.distrosfaqs.org/centos-announce/cesa-20150983-moderate-centos-7-tomcat-security-update/"
},
{
"category": "external",
"summary": "HP-UX Security Bulletin HPSBUX03337 SSRT102066 rev.1",
"url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04686230"
},
{
"category": "external",
"summary": "HP-UX Security Bulletin HPSBUX03341 SSRT102068 rev.1",
"url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04693706"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-2654-1",
"url": "http://www.ubuntu.com/usn/usn-2654-1/"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-2655-1",
"url": "http://www.ubuntu.com/usn/usn-2655-1/"
},
{
"category": "external",
"summary": "Blue Coat Security Advisory SA100 vom 2015-07-23",
"url": "https://bto.bluecoat.com/security-advisory/sa100"
},
{
"category": "external",
"summary": "SUSE Security Update vom 2015-08-04",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151337-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2015:1565-1 vom 2015-09-17",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151565-1.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-3447 vom 2016-01-18",
"url": "https://www.debian.org/security/2016/dsa-3447"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-3530 vom 2016-03-26",
"url": "https://www.debian.org/security/2016/dsa-3530"
}
],
"source_lang": "en-US",
"title": "Apache Tomcat: Schwachstelle erm\u00f6glicht Denial of Service und Manipulation",
"tracking": {
"current_release_date": "2023-02-21T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:44:35.995+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-0451",
"initial_release_date": "2015-02-16T23:00:00.000+00:00",
"revision_history": [
{
"date": "2015-02-16T23:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2015-02-16T23:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-03-29T22:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2015-03-29T22:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-03-29T22:00:00.000+00:00",
"number": "5",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-06-11T22:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2015-06-11T22:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2015-06-11T22:00:00.000+00:00",
"number": "8",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-06-25T22:00:00.000+00:00",
"number": "9",
"summary": "New remediations available"
},
{
"date": "2015-06-25T22:00:00.000+00:00",
"number": "10",
"summary": "New remediations available"
},
{
"date": "2015-07-23T22:00:00.000+00:00",
"number": "11",
"summary": "New remediations available"
},
{
"date": "2015-07-23T22:00:00.000+00:00",
"number": "12",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-08-04T22:00:00.000+00:00",
"number": "13",
"summary": "New remediations available"
},
{
"date": "2015-08-04T22:00:00.000+00:00",
"number": "14",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-08-04T22:00:00.000+00:00",
"number": "15",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-08-04T22:00:00.000+00:00",
"number": "16",
"summary": "Version nicht vorhanden"
},
{
"date": "2015-09-17T22:00:00.000+00:00",
"number": "17",
"summary": "New remediations available"
},
{
"date": "2016-01-17T23:00:00.000+00:00",
"number": "18",
"summary": "New remediations available"
},
{
"date": "2016-03-28T22:00:00.000+00:00",
"number": "19",
"summary": "New remediations available"
},
{
"date": "2016-03-28T22:00:00.000+00:00",
"number": "20",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-03-28T22:00:00.000+00:00",
"number": "21",
"summary": "Version nicht vorhanden"
},
{
"date": "2023-02-21T23:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "22"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Apache Tomcat \u003c 6.0.43",
"product": {
"name": "Apache Tomcat \u003c 6.0.43",
"product_id": "T004526",
"product_identification_helper": {
"cpe": "cpe:/a:apache:tomcat:6.0.43"
}
}
},
{
"category": "product_name",
"name": "Apache Tomcat \u003c 7.0.55",
"product": {
"name": "Apache Tomcat \u003c 7.0.55",
"product_id": "T004527",
"product_identification_helper": {
"cpe": "cpe:/a:apache:tomcat:7.0.55"
}
}
},
{
"category": "product_name",
"name": "Apache Tomcat \u003c 8.0.9",
"product": {
"name": "Apache Tomcat \u003c 8.0.9",
"product_id": "T004528",
"product_identification_helper": {
"cpe": "cpe:/a:apache:tomcat:8.0.9"
}
}
}
],
"category": "product_name",
"name": "Tomcat"
}
],
"category": "vendor",
"name": "Apache"
},
{
"branches": [
{
"category": "product_name",
"name": "Blue Coat Director",
"product": {
"name": "Blue Coat Director",
"product_id": "T005196",
"product_identification_helper": {
"cpe": "cpe:/a:bluecoat:director:-"
}
}
}
],
"category": "vendor",
"name": "Blue Coat"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE HP-UX",
"product": {
"name": "HPE HP-UX",
"product_id": "4871",
"product_identification_helper": {
"cpe": "cpe:/o:hp:hp-ux:-"
}
}
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM FlashSystem 840",
"product": {
"name": "IBM FlashSystem 840",
"product_id": "T026432",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:flashsystem:840"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source CentOS 7",
"product": {
"name": "Open Source CentOS 7",
"product_id": "T003633",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:7"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server v.7",
"product": {
"name": "Red Hat Enterprise Linux Server v.7",
"product_id": "T003550",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop v.7",
"product": {
"name": "Red Hat Enterprise Linux Desktop v.7",
"product_id": "T003551",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_desktop:7::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node v.7",
"product": {
"name": "Red Hat Enterprise Linux HPC Node v.7",
"product_id": "T003549",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation v.7",
"product": {
"name": "Red Hat Enterprise Linux Workstation v.7",
"product_id": "T003565",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_workstation:7"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server",
"product": {
"name": "SUSE Linux Enterprise Server",
"product_id": "T002223",
"product_identification_helper": {
"cpe": "cpe:/o:suse:linux_enterprise_server:11:sp3"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0227",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Apache Tomcat in der \"ChunkedInputFilter\" Implementierung. Ein Angreifer kann durch Senden geeignet manipulierter Anfragen an einen betroffenen Server einen Denial of Service Zustand herbeif\u00fchren oder daf\u00fcr sorgen, dass Teile (\"chunks\") einer Anfrage als eine weitere Anfrage behandelt werden (\"Request Smuggling\")."
}
],
"product_status": {
"known_affected": [
"T003550",
"T003551",
"2951",
"T003565",
"4871",
"T003633",
"T002223",
"T003549",
"T005196",
"T026432"
]
},
"release_date": "2015-02-16T23:00:00.000+00:00",
"title": "CVE-2014-0227"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.