Security
Headlines
HeadlinesLatestCVEs

Headline

RHSA-2021:0882: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es):

  • tomcat: Session fixation when using FORM authentication (CVE-2019-17563)
  • tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling (CVE-2020-1935) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Related CVEs:
  • CVE-2019-17563: tomcat: Session fixation when using FORM authentication
  • CVE-2020-1935: tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling
Red Hat Security Data
#vulnerability#linux#red_hat#apache#js#java

Red Hat Security Data: Latest News

RHSA-2023:5627: Red Hat Security Advisory: kernel security, bug fix, and enhancement update