Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2014-0230 (GCVE-0-2014-0230)
Vulnerability from cvelistv5 – Published: 2015-06-07 23:00 – Updated: 2024-08-06 09:05
VLAI
EPSS
Summary
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
39 references
Date Public
2015-04-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T09:05:39.368Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"name": "USN-2654-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2654-1"
},
{
"name": "RHSA-2015:1622",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1622.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://issues.jboss.org/browse/JWS-220"
},
{
"name": "DSA-3530",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3530"
},
{
"name": "RHSA-2016:0599",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0599.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603779"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-7.html"
},
{
"name": "HPSBUX03561",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=145974991225029\u0026w=2"
},
{
"name": "[oss-security] 20150409 Apache Tomcat partial file upload DoS CVE-2014-0230",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2015/04/10/1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-8.html"
},
{
"name": "RHSA-2015:2661",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-2661.html"
},
{
"name": "RHSA-2016:0596",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0596.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013"
},
{
"name": "RHSA-2016:0595",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0595.html"
},
{
"name": "RHSA-2015:2659",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2015:2659"
},
{
"name": "[tomcat-announce] 20150505 [SECURITY] CVE-2014-0230: Apache Tomcat DoS",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E"
},
{
"name": "HPSBOV03503",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144498216801440\u0026w=2"
},
{
"name": "RHSA-2016:0598",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0598.html"
},
{
"name": "RHSA-2015:2660",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2015:2660"
},
{
"name": "USN-2655-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2655-1"
},
{
"name": "RHSA-2015:1621",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1621.html"
},
{
"name": "74475",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/74475"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://issues.jboss.org/browse/JWS-219"
},
{
"name": "DSA-3447",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3447"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603775"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603770"
},
{
"name": "RHSA-2016:0597",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0597.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-04-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-02-13T16:10:12.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"name": "USN-2654-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2654-1"
},
{
"name": "RHSA-2015:1622",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1622.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://issues.jboss.org/browse/JWS-220"
},
{
"name": "DSA-3530",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2016/dsa-3530"
},
{
"name": "RHSA-2016:0599",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0599.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603779"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-7.html"
},
{
"name": "HPSBUX03561",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=145974991225029\u0026w=2"
},
{
"name": "[oss-security] 20150409 Apache Tomcat partial file upload DoS CVE-2014-0230",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2015/04/10/1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-8.html"
},
{
"name": "RHSA-2015:2661",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-2661.html"
},
{
"name": "RHSA-2016:0596",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0596.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013"
},
{
"name": "RHSA-2016:0595",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0595.html"
},
{
"name": "RHSA-2015:2659",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2015:2659"
},
{
"name": "[tomcat-announce] 20150505 [SECURITY] CVE-2014-0230: Apache Tomcat DoS",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E"
},
{
"name": "HPSBOV03503",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144498216801440\u0026w=2"
},
{
"name": "RHSA-2016:0598",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0598.html"
},
{
"name": "RHSA-2015:2660",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2015:2660"
},
{
"name": "USN-2655-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2655-1"
},
{
"name": "RHSA-2015:1621",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1621.html"
},
{
"name": "74475",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/74475"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://issues.jboss.org/browse/JWS-219"
},
{
"name": "DSA-3447",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2016/dsa-3447"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603775"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603770"
},
{
"name": "RHSA-2016:0597",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0597.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-0230",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"name": "USN-2654-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2654-1"
},
{
"name": "RHSA-2015:1622",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1622.html"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "https://issues.jboss.org/browse/JWS-220",
"refsource": "CONFIRM",
"url": "https://issues.jboss.org/browse/JWS-220"
},
{
"name": "DSA-3530",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2016/dsa-3530"
},
{
"name": "RHSA-2016:0599",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0599.html"
},
{
"name": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603779",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603779"
},
{
"name": "http://tomcat.apache.org/security-7.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-7.html"
},
{
"name": "HPSBUX03561",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=145974991225029\u0026w=2"
},
{
"name": "[oss-security] 20150409 Apache Tomcat partial file upload DoS CVE-2014-0230",
"refsource": "MLIST",
"url": "http://openwall.com/lists/oss-security/2015/04/10/1"
},
{
"name": "http://tomcat.apache.org/security-8.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-8.html"
},
{
"name": "RHSA-2015:2661",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-2661.html"
},
{
"name": "RHSA-2016:0596",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0596.html"
},
{
"name": "http://tomcat.apache.org/security-6.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-6.html"
},
{
"name": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013",
"refsource": "CONFIRM",
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013"
},
{
"name": "RHSA-2016:0595",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0595.html"
},
{
"name": "RHSA-2015:2659",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2015:2659"
},
{
"name": "[tomcat-announce] 20150505 [SECURITY] CVE-2014-0230: Apache Tomcat DoS",
"refsource": "MLIST",
"url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E"
},
{
"name": "HPSBOV03503",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=144498216801440\u0026w=2"
},
{
"name": "RHSA-2016:0598",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0598.html"
},
{
"name": "RHSA-2015:2660",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2015:2660"
},
{
"name": "USN-2655-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2655-1"
},
{
"name": "RHSA-2015:1621",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1621.html"
},
{
"name": "74475",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/74475"
},
{
"name": "https://issues.jboss.org/browse/JWS-219",
"refsource": "CONFIRM",
"url": "https://issues.jboss.org/browse/JWS-219"
},
{
"name": "DSA-3447",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2016/dsa-3447"
},
{
"name": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603775",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603775"
},
{
"name": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603770",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1603770"
},
{
"name": "RHSA-2016:0597",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0597.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2014-0230",
"datePublished": "2015-06-07T23:00:00.000Z",
"dateReserved": "2013-12-03T00:00:00.000Z",
"dateUpdated": "2024-08-06T09:05:39.368Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2014-0230",
"date": "2026-05-30",
"epss": "0.03099",
"percentile": "0.87031"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2014-0230\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2015-06-07T23:59:02.690\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.\"},{\"lang\":\"es\",\"value\":\"Apache Tomcat 6.x en versiones anteriores a 6.0.44, 7.x en versiones anteriores a 7.0.55 y 8.x en versiones anteriores a 8.0.9 no maneja adecuadamente los casos en los que se produce una respuesta HTTP antes de terminar la lectura de una petici\u00f3n de cuerpo entero, lo que permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de hilo) a trav\u00e9s de una serie de intentos de carga abortada.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49E3C039-A949-4F1B-892A-57147EECB249\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.0:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A354C34-A3FE-4B8A-9985-8874A0634BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F28C7801-41B9-4552-BA1E-577967BCBBEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.1:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFE300CC-FD4A-444E-8506-E5E269D0A0A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25B21085-7259-4685-9D1F-FF98E6489E10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.2:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"F50A3EC9-516E-48A7-839B-A73F491B5B9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.2:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C28F09D-5CAA-4CA7-A2B5-3B2820F5F409\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"635EE321-2A1F-4FF8-95BE-0C26591969D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.4:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"FAC2FC75-97D2-4EA1-A1A0-F592A6D7C1F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.6:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4871FD1-7F8C-4677-A80B-4A0BBC71DD7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.7:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"31AB969A-9ACE-44EF-B2E5-CEC008F47C46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.7:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"06217215-72E4-4478-BACB-628A0836A645\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C95ADA4-66F5-45C4-A677-ACE22367A75A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.8:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA810F3F-ADD3-4D3F-9DFC-DBDD87B3079C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11951A10-39A2-4FF5-8C43-DF94730FB794\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.9:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B79F2EA-C893-4359-80EC-24AE38D982E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"351E5BCF-A56B-4D91-BA3C-21A4B77D529A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DC2BBB4-171E-4EFF-A575-A5B7FF031755\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B6B0504-27C1-4824-A928-A878CBBAB32D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D903956B-14F5-4177-AF12-0A5F1846D3C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81F847DC-A2F5-456C-9038-16A0E85F4C3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6B93A3A-D487-4CA1-8257-26F8FE287B8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD8802B2-57E0-4AA6-BC8E-00DE60468569\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8461DF95-18DC-4BF5-A703-7F19DA88DC30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F4C9BCF-9C73-4991-B02F-E08C5DA06EBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2823789C-2CB6-4300-94DB-BDBE83ABA8E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5416C76-46ED-4CB1-A7F8-F24EA16DE7F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A61429EE-4331-430C-9830-58DCCBCBCB58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31B3593F-CEDF-423C-90F8-F88EED87DC3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE7862B2-E1FA-4E16-92CD-8918AB461D9A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9E03BE3-60CC-4415-B993-D0BB00F87A30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE92E59A-FF0D-4D1A-8B12-CC41A7E1FD3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFD64FE7-ABAF-49F3-B8D0-91C37C822F4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48E5E8C3-21AD-4230-B945-AB7DE66307B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4945C8C1-C71B-448B-9075-07C6C92599CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED4730B0-2E09-408B-AFD4-FE00F73700FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8DE8A8A-7643-4292-BCC1-758AE0940207\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9B54FCD-CF7C-47E2-8513-40419E47AF49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.41:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D87EFB6D-B626-469F-907C-40C771A55833\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.43:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6330B97B-8FC5-4D7E-A960-5D94EDD0C378\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F8C62EF-1B67-456A-9C66-755439CF8556\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"33E9607B-4D28-460D-896B-E4B7FA22441E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A819E245-D641-4F19-9139-6C940504F6E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C381275-10C5-4939-BCE3-0D1F3B3CB2EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"81A31CA0-A209-4C49-AA06-C38E165E5B68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7205475A-6D04-4042-B24E-1DA5A57029B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08022987-B36B-4F63-88A5-A8F59195DF4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AA563BF-A67A-477D-956A-167ABEF885C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF4B7557-EF35-451E-B55D-3296966695AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8980E61E-27BE-4858-82B3-C0E8128AF521\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8756BF9B-3E24-4677-87AE-31CE776541F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88CE057E-2092-4C98-8D0C-75CF439D0A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F194580-EE6D-4E38-87F3-F0661262256B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9731BAA-4C6C-4259-B786-F577D8A90FA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F74A421-D019-4248-84B8-C70D4D9A8A95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05346F5A-FB52-4376-AAC7-9A5308216545\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"305688F2-50A6-41FB-8614-BC589DB9A789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D24AA431-C436-4AA5-85DF-B9AAFF2548FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25966344-15D5-4101-9346-B06BFD2DFFF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11F4CBAC-27B1-4EFF-955A-A63B457D0578\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD55B338-9DBE-4643-ABED-A08964D3AF7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D4F710E-06EA-48F4-AC6A-6F143950F015\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C4936C2-0B2D-4C44-98C3-443090965F5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48453405-2319-4327-9F4C-6F70B49452C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49DD9544-6424-41A6-AEC0-EC19B8A10E71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4670E65-2E11-49A4-B661-57C2F60D411F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E8FF71D-4710-4FBB-9925-A6A26C450F7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31002A23-4788-4BC7-AE11-A3C2AA31716D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7144EDDF-8265-4642-8EEB-ED52527E0A26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF06B5C1-B9DD-4673-A101-56E1E593ACDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D731065-626B-4425-8E49-F708DD457824\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3D850EA-E537-42C8-93B9-96E15CB26747\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E037DA05-2BEF-4F64-B8BB-307247B6A05C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCAF1EB5-FB34-40FC-96ED-9D073890D8BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D395D95B-1F4A-420E-A0F6-609360AF7B69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BD221BA-0AB6-4972-8AD9-5D37AC07762F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E55B6565-96CB-4F6A-9A80-C3FB82F30546\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3300AFE-49A4-4904-B9A0-5679F09FA01E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED5125CC-05F9-4678-90DB-A5C7CD24AE6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B904C74-B92E-4EAE-AE6C-78E2B844C3DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C6109D1-BC36-40C5-A02A-7AEBC949BAC0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA8A7333-B4C3-4876-AE01-62F2FD315504\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92993E23-D805-407B-8B87-11CEEE8B212F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A11BD74-305C-41E2-95B1-5008EEF5FA5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"595442D0-9DB7-475A-AE30-8535B70E122E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B0BA92A-0BD3-4CE4-9465-95E949104BAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F944B72-B9EB-4EB8-AEA3-E0D7ADBE1305\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFD3EB84-2ED2-49D4-8BC9-6398C2E46F0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEDF6E1A-0DD6-42AB-9510-F6F4B6002C91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C947E549-2459-4AFB-84A7-36BDA30B5F29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D55DF79-F9BE-4907-A4D8-96C4B11189ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14AB5787-82D7-4F78-BE93-4556AB7A7D0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8E9453E-BC9B-4F77-85FA-BA15AC55C245\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4752862B-7D26-4285-B8A0-CF082C758353\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*\",\"matchCriteriaId\":\"58EA7199-3373-4F97-9907-3A479A02155E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4693BD36-E522-4C8E-9667-8F3E14A05EF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BBBC5EA-012C-4C5D-A61B-BAF134B300DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A358FDF-C249-4D7A-9445-8B9E7D9D40AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFF96F96-34DB-4EB3-BF59-11220673FA26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EDF3E379-47D2-4C86-8C6D-8B3C25A0E1C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61E008F8-2F01-4DD8-853A-337B4B4163C6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:virtualization:4.63:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A7DA626-EC3E-4066-A7DD-14D42B3DAE75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:virtualization:4.71:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A7C0137-ED94-429A-A694-8FD9A0B8D44C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:virtualization:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D5D497-72EB-4A5C-AD92-3C09AE5FD327\"}]}]}],\"references\":[{\"url\":\"http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144498216801440\u0026w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=145974991225029\u0026w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://openwall.com/lists/oss-security/2015/04/10/1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1621.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1622.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-2661.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0595.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0596.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0597.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0598.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0599.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1603770\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1603775\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1603779\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-7.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-8.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3447\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3530\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/74475\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2654-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2655-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2015:2659\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2015:2660\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://issues.jboss.org/browse/JWS-219\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://issues.jboss.org/browse/JWS-220\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144498216801440\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=145974991225029\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://openwall.com/lists/oss-security/2015/04/10/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1621.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1622.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-2661.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0595.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0596.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0597.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0598.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0599.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1603770\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1603775\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://svn.apache.org/viewvc?view=revision\u0026revision=1603779\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-7.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-8.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3447\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3530\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/74475\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2654-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2655-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2015:2659\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2015:2660\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://issues.jboss.org/browse/JWS-219\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://issues.jboss.org/browse/JWS-220\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
RHSA-2016:0599
Vulnerability from csaf_redhat - Published: 2016-04-05 22:20 - Updated: 2025-11-21 17:55Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.7 update
Severity
Moderate
Notes
Topic: An update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.
This release serves as a replacement for Red Hat JBoss Enterprise Application Platform 6.4.6, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the Red Hat JBoss Enterprise Application Platform 6.4.7 Release Notes, linked to in the References.
Security Fix(es):
* A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open (denial of service). (CVE-2016-2094)
* It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made. (CVE-2014-0230)
The CVE-2016-2094 issue was discovered by Aaron Ogburn of Red Hat.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made.
5.0 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open (denial of service).
5.0 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
27 references
Acknowledgments
Red Hat
Aaron Ogburn
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.\n\nThis release serves as a replacement for Red Hat JBoss Enterprise Application Platform 6.4.6, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the Red Hat JBoss Enterprise Application Platform 6.4.7 Release Notes, linked to in the References.\n\nSecurity Fix(es):\n\n* A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open (denial of service). (CVE-2016-2094)\n\n* It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made. (CVE-2014-0230)\n\nThe CVE-2016-2094 issue was discovered by Aaron Ogburn of Red Hat.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0599",
"url": "https://access.redhat.com/errata/RHSA-2016:0599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/",
"url": "https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4"
},
{
"category": "external",
"summary": "1191200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191200"
},
{
"category": "external",
"summary": "1291761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1291761"
},
{
"category": "external",
"summary": "1295464",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1295464"
},
{
"category": "external",
"summary": "1299561",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299561"
},
{
"category": "external",
"summary": "1299905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299905"
},
{
"category": "external",
"summary": "1302406",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1302406"
},
{
"category": "external",
"summary": "1304476",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1304476"
},
{
"category": "external",
"summary": "1308465",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1308465"
},
{
"category": "external",
"summary": "1310702",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310702"
},
{
"category": "external",
"summary": "1311625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311625"
},
{
"category": "external",
"summary": "1312043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1312043"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0599.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.7 update",
"tracking": {
"current_release_date": "2025-11-21T17:55:42+00:00",
"generator": {
"date": "2025-11-21T17:55:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2016:0599",
"initial_release_date": "2016-04-05T22:20:53+00:00",
"revision_history": [
{
"date": "2016-04-05T22:20:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-04-05T22:20:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:55:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.4",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.4",
"product_id": "Red Hat JBoss Enterprise Application Platform 6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.4"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0230",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2015-02-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191200"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: non-persistent DoS attack by feeding data by aborting an upload",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0230"
},
{
"category": "external",
"summary": "RHBZ#1191200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0230",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0230"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44",
"url": "http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.9",
"url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.9"
}
],
"release_date": "2014-07-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-05T22:20:53+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: non-persistent DoS attack by feeding data by aborting an upload"
},
{
"acknowledgments": [
{
"names": [
"Aaron Ogburn"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2016-2094",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2016-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1308465"
}
],
"notes": [
{
"category": "description",
"text": "A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2094"
},
{
"category": "external",
"summary": "RHBZ#1308465",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1308465"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2094",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2094"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2094",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2094"
}
],
"release_date": "2016-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-05T22:20:53+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client"
}
]
}
RHSA-2016:2599
Vulnerability from csaf_redhat - Published: 2016-11-03 08:12 - Updated: 2026-03-04 16:43Summary
Red Hat Security Advisory: tomcat security, bug fix, and enhancement update
Severity
Moderate
Notes
Topic: An update for tomcat is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.
The following packages have been upgraded to a newer upstream version: tomcat (7.0.69). (BZ#1287928)
Security Fix(es):
* A CSRF flaw was found in Tomcat's the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to perform a CSRF attack. (CVE-2015-5351)
* It was found that several Tomcat session persistence mechanisms could allow a remote, authenticated user to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that placed a crafted object in a session. (CVE-2016-0714)
* A security manager bypass flaw was found in Tomcat that could allow remote, authenticated users to access arbitrary application data, potentially resulting in a denial of service. (CVE-2016-0763)
* A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer (4096 bytes) used to read the uploaded file if the boundary was the typical tens of bytes long. (CVE-2016-3092)
* A directory traversal flaw was found in Tomcat's RequestUtil.java. A remote, authenticated user could use this flaw to bypass intended SecurityManager restrictions and list a parent directory via a '/..' in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call. (CVE-2015-5174)
* It was found that Tomcat could reveal the presence of a directory even when that directory was protected by a security constraint. A user could make a request to a directory via a URL not ending with a slash and, depending on whether Tomcat redirected that request, could confirm whether that directory existed. (CVE-2015-5345)
* It was found that Tomcat allowed the StatusManagerServlet to be loaded by a web application when a security manager was configured. This allowed a web application to list all deployed web applications and expose sensitive information such as session IDs. (CVE-2016-0706)
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made.
5.0 ()
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
A directory traversal flaw was found in Tomcat's RequestUtil.java. A remote, authenticated user could use this flaw to bypass intended SecurityManager restrictions and list a parent directory via a '/..' in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call.
4.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
It was found that Tomcat could reveal the presence of a directory even when that directory was protected by a security constraint. A user could make a request to a directory via a URL not ending with a slash and, depending on whether Tomcat redirected that request, could confirm whether that directory existed.
5.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
A CSRF flaw was found in Tomcat's the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to perform a CSRF attack.
8.8 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was found that Tomcat allowed the StatusManagerServlet to be loaded by a web application when a security manager was configured. This allowed a web application to list all deployed web applications and expose sensitive information such as session IDs.
4.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
It was found that several Tomcat session persistence mechanisms could allow a remote, authenticated user to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that placed a crafted object in a session.
8.8 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A security manager bypass flaw was found in Tomcat that could allow remote, authenticated users to access arbitrary application data, potentially resulting in a denial of service.
6.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer (4096 bytes) used to read the uploaded file if the boundary was the typical tens of bytes long.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-0:7.0.69-10.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
67 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for tomcat is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.\n\nThe following packages have been upgraded to a newer upstream version: tomcat (7.0.69). (BZ#1287928)\n\nSecurity Fix(es):\n\n* A CSRF flaw was found in Tomcat\u0027s the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to perform a CSRF attack. (CVE-2015-5351)\n\n* It was found that several Tomcat session persistence mechanisms could allow a remote, authenticated user to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that placed a crafted object in a session. (CVE-2016-0714)\n\n* A security manager bypass flaw was found in Tomcat that could allow remote, authenticated users to access arbitrary application data, potentially resulting in a denial of service. (CVE-2016-0763)\n\n* A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer (4096 bytes) used to read the uploaded file if the boundary was the typical tens of bytes long. (CVE-2016-3092)\n\n* A directory traversal flaw was found in Tomcat\u0027s RequestUtil.java. A remote, authenticated user could use this flaw to bypass intended SecurityManager restrictions and list a parent directory via a \u0027/..\u0027 in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call. (CVE-2015-5174)\n\n* It was found that Tomcat could reveal the presence of a directory even when that directory was protected by a security constraint. A user could make a request to a directory via a URL not ending with a slash and, depending on whether Tomcat redirected that request, could confirm whether that directory existed. (CVE-2015-5345)\n\n* It was found that Tomcat allowed the StatusManagerServlet to be loaded by a web application when a security manager was configured. This allowed a web application to list all deployed web applications and expose sensitive information such as session IDs. (CVE-2016-0706)\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:2599",
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html"
},
{
"category": "external",
"summary": "1133070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133070"
},
{
"category": "external",
"summary": "1201409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1201409"
},
{
"category": "external",
"summary": "1208402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1208402"
},
{
"category": "external",
"summary": "1221896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221896"
},
{
"category": "external",
"summary": "1229476",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229476"
},
{
"category": "external",
"summary": "1240279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1240279"
},
{
"category": "external",
"summary": "1265698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1265698"
},
{
"category": "external",
"summary": "1277197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277197"
},
{
"category": "external",
"summary": "1287928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1287928"
},
{
"category": "external",
"summary": "1311076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311076"
},
{
"category": "external",
"summary": "1311082",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311082"
},
{
"category": "external",
"summary": "1311087",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311087"
},
{
"category": "external",
"summary": "1311089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311089"
},
{
"category": "external",
"summary": "1311093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311093"
},
{
"category": "external",
"summary": "1311622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311622"
},
{
"category": "external",
"summary": "1320853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1320853"
},
{
"category": "external",
"summary": "1327326",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1327326"
},
{
"category": "external",
"summary": "1347774",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1347774"
},
{
"category": "external",
"summary": "1347860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1347860"
},
{
"category": "external",
"summary": "1349468",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1349468"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2599.json"
}
],
"title": "Red Hat Security Advisory: tomcat security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-03-04T16:43:40+00:00",
"generator": {
"date": "2026-03-04T16:43:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.2"
}
},
"id": "RHSA-2016:2599",
"initial_release_date": "2016-11-03T08:12:12+00:00",
"revision_history": [
{
"date": "2016-11-03T08:12:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-11-03T08:12:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-04T16:43:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-webapps@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsp-2.2-api@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-admin-webapps@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-servlet-3.0-api@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-lib-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-lib-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-lib@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-el-2.2-api@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-javadoc@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsvc@7.0.69-10.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"product": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"product_id": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-docs-webapp@7.0.69-10.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat-0:7.0.69-10.el7.src",
"product": {
"name": "tomcat-0:7.0.69-10.el7.src",
"product_id": "tomcat-0:7.0.69-10.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.69-10.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.69-10.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-0:7.0.69-10.el7.src"
},
"product_reference": "tomcat-0:7.0.69-10.el7.src",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-lib-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.69-10.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.69-10.el7.noarch",
"relates_to_product_reference": "7Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0230",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2015-02-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1191200"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: non-persistent DoS attack by feeding data by aborting an upload",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0230"
},
{
"category": "external",
"summary": "RHBZ#1191200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0230",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0230"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44",
"url": "http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.9",
"url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.9"
}
],
"release_date": "2014-07-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: non-persistent DoS attack by feeding data by aborting an upload"
},
{
"cve": "CVE-2015-5174",
"discovery_date": "2015-08-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1265698"
}
],
"notes": [
{
"category": "description",
"text": "A directory traversal flaw was found in Tomcat\u0027s RequestUtil.java. A remote, authenticated user could use this flaw to bypass intended SecurityManager restrictions and list a parent directory via a \u0027/..\u0027 in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: URL Normalization issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5174"
},
{
"category": "external",
"summary": "RHBZ#1265698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1265698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5174",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5174"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5174",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5174"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Feb/149",
"url": "http://seclists.org/bugtraq/2016/Feb/149"
}
],
"release_date": "2016-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: URL Normalization issue"
},
{
"cve": "CVE-2015-5345",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311089"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Tomcat could reveal the presence of a directory even when that directory was protected by a security constraint. A user could make a request to a directory via a URL not ending with a slash and, depending on whether Tomcat redirected that request, could confirm whether that directory existed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: directory disclosure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5345"
},
{
"category": "external",
"summary": "RHBZ#1311089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311089"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5345",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5345"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5345",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5345"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Feb/146",
"url": "http://seclists.org/bugtraq/2016/Feb/146"
}
],
"release_date": "2016-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: directory disclosure"
},
{
"cve": "CVE-2015-5351",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311076"
}
],
"notes": [
{
"category": "description",
"text": "A CSRF flaw was found in Tomcat\u0027s the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to perform a CSRF attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: CSRF token leak",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5351"
},
{
"category": "external",
"summary": "RHBZ#1311076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5351",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5351"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5351",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5351"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Feb/148",
"url": "http://seclists.org/bugtraq/2016/Feb/148"
}
],
"release_date": "2016-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat: CSRF token leak"
},
{
"cve": "CVE-2016-0706",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311087"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Tomcat allowed the StatusManagerServlet to be loaded by a web application when a security manager was configured. This allowed a web application to list all deployed web applications and expose sensitive information such as session IDs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: security manager bypass via StatusManagerServlet",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0706"
},
{
"category": "external",
"summary": "RHBZ#1311087",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311087"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0706",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0706"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0706",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0706"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Feb/144",
"url": "http://seclists.org/bugtraq/2016/Feb/144"
}
],
"release_date": "2016-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: security manager bypass via StatusManagerServlet"
},
{
"cve": "CVE-2016-0714",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311082"
}
],
"notes": [
{
"category": "description",
"text": "It was found that several Tomcat session persistence mechanisms could allow a remote, authenticated user to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that placed a crafted object in a session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: Security Manager bypass via persistence mechanisms",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0714"
},
{
"category": "external",
"summary": "RHBZ#1311082",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311082"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0714",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0714"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0714",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0714"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Feb/145",
"url": "http://seclists.org/bugtraq/2016/Feb/145"
}
],
"release_date": "2016-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat: Security Manager bypass via persistence mechanisms"
},
{
"cve": "CVE-2016-0763",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1311093"
}
],
"notes": [
{
"category": "description",
"text": "A security manager bypass flaw was found in Tomcat that could allow remote, authenticated users to access arbitrary application data, potentially resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: security manager bypass via setGlobalContext()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0763"
},
{
"category": "external",
"summary": "RHBZ#1311093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0763",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0763"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0763",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0763"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Feb/147",
"url": "http://seclists.org/bugtraq/2016/Feb/147"
}
],
"release_date": "2016-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat: security manager bypass via setGlobalContext()"
},
{
"cve": "CVE-2016-3092",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1349468"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer (4096 bytes) used to read the uploaded file if the boundary was the typical tens of bytes long.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: Usage of vulnerable FileUpload package can result in denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3092"
},
{
"category": "external",
"summary": "RHBZ#1349468",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1349468"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3092",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3092"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3092",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3092"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-7.html",
"url": "http://tomcat.apache.org/security-7.html"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-8.html",
"url": "http://tomcat.apache.org/security-8.html"
}
],
"release_date": "2016-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-03T08:12:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2599"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-0:7.0.69-10.el7.src",
"7Client-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.noarch",
"7Client:tomcat-0:7.0.69-10.el7.src",
"7Client:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Client:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Client:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Client:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Client:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Client:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-0:7.0.69-10.el7.src",
"7ComputeNode:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-lib-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7ComputeNode:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-0:7.0.69-10.el7.src",
"7Server-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.noarch",
"7Server:tomcat-0:7.0.69-10.el7.src",
"7Server:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Server:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Server:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Server:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Server:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Server:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-0:7.0.69-10.el7.src",
"7Workstation-optional:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation-optional:tomcat-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-0:7.0.69-10.el7.src",
"7Workstation:tomcat-admin-webapps-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-docs-webapp-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-el-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-javadoc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsp-2.2-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-jsvc-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-lib-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-servlet-3.0-api-0:7.0.69-10.el7.noarch",
"7Workstation:tomcat-webapps-0:7.0.69-10.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat: Usage of vulnerable FileUpload package can result in denial of service"
}
]
}
SUSE-SU-2015:1337-1
Vulnerability from csaf_suse - Published: 2013-08-02 13:29 - Updated: 2013-08-02 13:29Summary
Security update for tomcat6
Severity
Moderate
Notes
Title of the patch: Security update for tomcat6
Description of the patch:
This update of tomcat6 fixes:
* apache-tomcat-CVE-2012-3544.patch (bnc#831119)
* use chown --no-dereference to prevent symlink attacks on log
(bnc#822177#c7/prevents CVE-2013-1976)
* Fix tomcat init scripts generating malformed classpath (
http://youtrack.jetbrains.com/issue/JT-18545
<http://youtrack.jetbrains.com/issue/JT-18545> ) bnc#804992 (patch
from m407)
* fix a typo in initscript (bnc#768772 )
* copy all shell scripts (bnc#818948)
Security Issue references:
* CVE-2012-3544
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3544>
* CVE-2013-1976
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976>
* CVE-2012-0022
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0022>
Patchnames: slessp3-tomcat6
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat6",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update of tomcat6 fixes:\n\n * apache-tomcat-CVE-2012-3544.patch (bnc#831119)\n * use chown --no-dereference to prevent symlink attacks on log\n (bnc#822177#c7/prevents CVE-2013-1976)\n * Fix tomcat init scripts generating malformed classpath (\n http://youtrack.jetbrains.com/issue/JT-18545\n \u003chttp://youtrack.jetbrains.com/issue/JT-18545\u003e ) bnc#804992 (patch\n from m407)\n * fix a typo in initscript (bnc#768772 )\n * copy all shell scripts (bnc#818948)\n\nSecurity Issue references:\n\n * CVE-2012-3544\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3544\u003e\n * CVE-2013-1976\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976\u003e\n * CVE-2012-0022\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0022\u003e\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp3-tomcat6",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1337-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1337-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151337-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1337-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-August/001523.html"
},
{
"category": "self",
"summary": "SUSE Bug 768772",
"url": "https://bugzilla.suse.com/768772"
},
{
"category": "self",
"summary": "SUSE Bug 804992",
"url": "https://bugzilla.suse.com/804992"
},
{
"category": "self",
"summary": "SUSE Bug 818948",
"url": "https://bugzilla.suse.com/818948"
},
{
"category": "self",
"summary": "SUSE Bug 822177",
"url": "https://bugzilla.suse.com/822177"
},
{
"category": "self",
"summary": "SUSE Bug 831119",
"url": "https://bugzilla.suse.com/831119"
},
{
"category": "self",
"summary": "SUSE Bug 906152",
"url": "https://bugzilla.suse.com/906152"
},
{
"category": "self",
"summary": "SUSE Bug 917127",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "self",
"summary": "SUSE Bug 918195",
"url": "https://bugzilla.suse.com/918195"
},
{
"category": "self",
"summary": "SUSE Bug 926762",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "self",
"summary": "SUSE Bug 931442",
"url": "https://bugzilla.suse.com/931442"
},
{
"category": "self",
"summary": "SUSE Bug 932698",
"url": "https://bugzilla.suse.com/932698"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-0022 page",
"url": "https://www.suse.com/security/cve/CVE-2012-0022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1976 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0227 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0230 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7810 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7810/"
}
],
"title": "Security update for tomcat6",
"tracking": {
"current_release_date": "2013-08-02T13:29:14Z",
"generator": {
"date": "2013-08-02T13:29:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1337-1",
"initial_release_date": "2013-08-02T13:29:14Z",
"revision_history": [
{
"date": "2013-08-02T13:29:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-lib-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"product": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"product_id": "tomcat6-webapps-6.0.18-20.35.42.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.18-20.35.42.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-0022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0022"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0022",
"url": "https://www.suse.com/security/cve/CVE-2012-0022"
},
{
"category": "external",
"summary": "SUSE Bug 742477 for CVE-2012-0022",
"url": "https://bugzilla.suse.com/742477"
},
{
"category": "external",
"summary": "SUSE Bug 745056 for CVE-2012-0022",
"url": "https://bugzilla.suse.com/745056"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2012-0022"
},
{
"cve": "CVE-2012-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3544"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3544",
"url": "https://www.suse.com/security/cve/CVE-2012-3544"
},
{
"category": "external",
"summary": "SUSE Bug 822177 for CVE-2012-3544",
"url": "https://bugzilla.suse.com/822177"
},
{
"category": "external",
"summary": "SUSE Bug 831119 for CVE-2012-3544",
"url": "https://bugzilla.suse.com/831119"
},
{
"category": "external",
"summary": "SUSE Bug 865746 for CVE-2012-3544",
"url": "https://bugzilla.suse.com/865746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "low"
}
],
"title": "CVE-2012-3544"
},
{
"cve": "CVE-2013-1976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1976"
}
],
"notes": [
{
"category": "general",
"text": "The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1976",
"url": "https://www.suse.com/security/cve/CVE-2013-1976"
},
{
"category": "external",
"summary": "SUSE Bug 822177 for CVE-2013-1976",
"url": "https://bugzilla.suse.com/822177"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2013-1976"
},
{
"cve": "CVE-2014-0227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0227"
}
],
"notes": [
{
"category": "general",
"text": "java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0227",
"url": "https://www.suse.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "SUSE Bug 917127 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2014-0227"
},
{
"cve": "CVE-2014-0230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0230"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0230",
"url": "https://www.suse.com/security/cve/CVE-2014-0230"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "important"
}
],
"title": "CVE-2014-0230"
},
{
"cve": "CVE-2014-7810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7810"
}
],
"notes": [
{
"category": "general",
"text": "The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7810",
"url": "https://www.suse.com/security/cve/CVE-2014-7810"
},
{
"category": "external",
"summary": "SUSE Bug 931442 for CVE-2014-7810",
"url": "https://bugzilla.suse.com/931442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.18-20.35.42.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.18-20.35.42.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-08-02T13:29:14Z",
"details": "moderate"
}
],
"title": "CVE-2014-7810"
}
]
}
SUSE-SU-2015:1565-1
Vulnerability from csaf_suse - Published: 2015-09-11 01:45 - Updated: 2015-09-11 01:45Summary
Security update for tomcat6
Severity
Moderate
Notes
Title of the patch: Security update for tomcat6
Description of the patch: This update for Tomcat fixes the following security issues:
- CVE-2014-7810: Security manager bypass via EL expressions. (bsc#931442)
It was found that the expression language resolver evaluated expressions within a
privileged code section. A malicious web application could have used this flaw to
bypass security manager protections.
- CVE-2014-0227: Limited DoS in chunked transfer encoding input filter. (bsc#917127)
It was discovered that the ChunkedInputFilter implementation did not fail subsequent
attempts to read input early enough. A remote attacker could have used this flaw to
perform a denial of service attack, by streaming an unlimited quantity of data,
leading to consumption of server resources.
- CVE-2014-0230: Non-persistent DoS attack by feeding data by aborting an upload
It was possible for a remote attacker to trigger a non-persistent DoS attack by
feeding data by aborting an upload. (bsc#926762)
Additionally, the following non-security issues have been fixed:
- Fix rights of all files within /usr/share/tomcat6/bin. (bsc#906152)
- Don't overwrite /var/run/tomcat6.pid when Tomcat is already running. (bsc#934219)
- Miscellaneous fixes and improvements to Tomcat's init script. (bsc#932698)
Patchnames: slessp4-tomcat6-12092
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for tomcat6",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for Tomcat fixes the following security issues:\n\n- CVE-2014-7810: Security manager bypass via EL expressions. (bsc#931442)\nIt was found that the expression language resolver evaluated expressions within a\nprivileged code section. A malicious web application could have used this flaw to\nbypass security manager protections.\n\n- CVE-2014-0227: Limited DoS in chunked transfer encoding input filter. (bsc#917127)\nIt was discovered that the ChunkedInputFilter implementation did not fail subsequent\nattempts to read input early enough. A remote attacker could have used this flaw to\nperform a denial of service attack, by streaming an unlimited quantity of data,\nleading to consumption of server resources.\n\n- CVE-2014-0230: Non-persistent DoS attack by feeding data by aborting an upload\nIt was possible for a remote attacker to trigger a non-persistent DoS attack by\nfeeding data by aborting an upload. (bsc#926762)\n\nAdditionally, the following non-security issues have been fixed:\n\n- Fix rights of all files within /usr/share/tomcat6/bin. (bsc#906152)\n- Don\u0027t overwrite /var/run/tomcat6.pid when Tomcat is already running. (bsc#934219)\n- Miscellaneous fixes and improvements to Tomcat\u0027s init script. (bsc#932698)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp4-tomcat6-12092",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1565-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1565-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151565-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1565-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-September/001594.html"
},
{
"category": "self",
"summary": "SUSE Bug 906152",
"url": "https://bugzilla.suse.com/906152"
},
{
"category": "self",
"summary": "SUSE Bug 917127",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "self",
"summary": "SUSE Bug 926762",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "self",
"summary": "SUSE Bug 931442",
"url": "https://bugzilla.suse.com/931442"
},
{
"category": "self",
"summary": "SUSE Bug 932698",
"url": "https://bugzilla.suse.com/932698"
},
{
"category": "self",
"summary": "SUSE Bug 934219",
"url": "https://bugzilla.suse.com/934219"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0227 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0230 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7810 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7810/"
}
],
"title": "Security update for tomcat6",
"tracking": {
"current_release_date": "2015-09-11T01:45:16Z",
"generator": {
"date": "2015-09-11T01:45:16Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1565-1",
"initial_release_date": "2015-09-11T01:45:16Z",
"revision_history": [
{
"date": "2015-09-11T01:45:16Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tomcat6-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-javadoc-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-lib-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-lib-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-lib-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch"
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"product": {
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"product_id": "tomcat6-webapps-6.0.41-0.47.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-javadoc-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-lib-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-6.0.41-0.47.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
},
"product_reference": "tomcat6-webapps-6.0.41-0.47.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0227"
}
],
"notes": [
{
"category": "general",
"text": "java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0227",
"url": "https://www.suse.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "SUSE Bug 917127 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/917127"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0227",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-11T01:45:16Z",
"details": "moderate"
}
],
"title": "CVE-2014-0227"
},
{
"cve": "CVE-2014-0230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0230"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0230",
"url": "https://www.suse.com/security/cve/CVE-2014-0230"
},
{
"category": "external",
"summary": "SUSE Bug 926762 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/926762"
},
{
"category": "external",
"summary": "SUSE Bug 988489 for CVE-2014-0230",
"url": "https://bugzilla.suse.com/988489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-11T01:45:16Z",
"details": "important"
}
],
"title": "CVE-2014-0230"
},
{
"cve": "CVE-2014-7810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7810"
}
],
"notes": [
{
"category": "general",
"text": "The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7810",
"url": "https://www.suse.com/security/cve/CVE-2014-7810"
},
{
"category": "external",
"summary": "SUSE Bug 931442 for CVE-2014-7810",
"url": "https://bugzilla.suse.com/931442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-11T01:45:16Z",
"details": "moderate"
}
],
"title": "CVE-2014-7810"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…