[Bug 1390520] CVE-2016-6794 tomcat: system property disclosure
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1390520
Hooman Broujerdi <hghasemb(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20161027, |impact=low,public=20161027,
|reported=20161027,source=in |reported=20161027,source=in
|ternet,cvss2=2.6/AV:N/AC:H/ |ternet,cvss2=2.6/AV:N/AC:H/
|Au:N/C:P/I:N/A:N,cvss3=3.1/ |Au:N/C:P/I:N/A:N,cvss3=3.1/
|CVSS:3.0/AV:N/AC:H/PR:L/UI: |CVSS:3.0/AV:N/AC:H/PR:L/UI:
|N/S:U/C:L/I:N/A:N,brms-5/jb |N/S:U/C:L/I:N/A:N,brms-5/jb
|ossweb=affected,eap-5/jboss |ossweb=affected,eap-5/jboss
|web=affected,eap-6/jbossweb |web=affected,eap-6/jbossweb
|=affected,jdg-6/jbossweb=af |=affected,jdg-6/jbossweb=af
|fected,jdv-6/jbossweb=affec |fected,jdv-6/jbossweb=affec
|ted,jon-3/jbossweb=affected |ted,jon-3/jbossweb=affected
|,fsw-6/jbossweb=affected,fu |,fsw-6/jbossweb=affected,fu
|se-6/jbossweb=affected,open |se-6/jbossweb=wontfix,opens
|shift-1/jbossweb=affected,r |hift-1/jbossweb=affected,rh
|hel-5/tomcat5=wontfix,rhel- |el-5/tomcat5=wontfix,rhel-6
|6/tomcat6=wontfix,rhel-7/to |/tomcat6=wontfix,rhel-7/tom
|mcat=wontfix,jbews-2/tomcat |cat=wontfix,jbews-2/tomcat7
|7=affected,jbews-2/tomcat6= |=affected,jbews-2/tomcat6=a
|affected,jbews-3/tomcat7=af |ffected,jbews-3/tomcat7=aff
|fected,jbews-3/tomcat8=affe |ected,jbews-3/tomcat8=affec
|cted,fedora-all/tomcat=affe |ted,fedora-all/tomcat=affec
|cted,epel-6/tomcat=affected |ted,epel-6/tomcat=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 6 months
[Bug 1390493] CVE-2016-6797 tomcat: unrestricted access to global resources
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1390493
Hooman Broujerdi <hghasemb(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20161027, |impact=low,public=20161027,
|reported=20161027,source=in |reported=20161027,source=in
|ternet,cvss2=2.6/AV:N/AC:H/ |ternet,cvss2=2.6/AV:N/AC:H/
|Au:N/C:P/I:N/A:N,cvss3=3.7/ |Au:N/C:P/I:N/A:N,cvss3=3.7/
|CVSS:3.0/AV:N/AC:H/PR:N/UI: |CVSS:3.0/AV:N/AC:H/PR:N/UI:
|N/S:U/C:L/I:N/A:N,brms-5/jb |N/S:U/C:L/I:N/A:N,brms-5/jb
|ossweb=affected,eap-5/jboss |ossweb=affected,eap-5/jboss
|web=affected,eap-6/jbossweb |web=affected,eap-6/jbossweb
|=affected,jdg-6/jbossweb=af |=affected,jdg-6/jbossweb=af
|fected,jdv-6/jbossweb=affec |fected,jdv-6/jbossweb=affec
|ted,jon-3/jbossweb=affected |ted,jon-3/jbossweb=affected
|,fsw-6/jbossweb=affected,fu |,fsw-6/jbossweb=affected,fu
|se-6/jbossweb=affected,open |se-6/jbossweb=wontfix,opens
|shift-1/jbossweb=affected,r |hift-1/jbossweb=affected,rh
|hel-5/tomcat5=wontfix,rhel- |el-5/tomcat5=wontfix,rhel-6
|6/tomcat6=wontfix,rhel-7/to |/tomcat6=wontfix,rhel-7/tom
|mcat=wontfix,jbews-2/tomcat |cat=wontfix,jbews-2/tomcat7
|7=affected,jbews-2/tomcat6= |=affected,jbews-2/tomcat6=a
|affected,jbews-3/tomcat7=af |ffected,jbews-3/tomcat7=aff
|fected,jbews-3/tomcat8=affe |ected,jbews-3/tomcat8=affec
|cted,fedora-all/tomcat=affe |ted,fedora-all/tomcat=affec
|cted,epel-6/tomcat=affected |ted,epel-6/tomcat=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 6 months
[Bug 1340396] CVE-2016-2175 pdfbox: XML External Entity vulnerability
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1340396
Pavel Polischouk <pavelp(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2016 |impact=moderate,public=2016
|0527,reported=20160527,sour |0527,reported=20160527,sour
|ce=oss-security,cvss2=5.8/A |ce=oss-security,cvss2=5.8/A
|V:N/AC:M/Au:N/C:P/I:N/A:P,c |V:N/AC:M/Au:N/C:P/I:N/A:P,c
|vss3=5.4/CVSS:3.0/AV:N/AC:L |vss3=5.4/CVSS:3.0/AV:N/AC:L
|/PR:N/UI:R/S:U/C:L/I:N/A:L, |/PR:N/UI:R/S:U/C:L/I:N/A:L,
|cwe=CWE-611,fedora-all/pdfb |cwe=CWE-611,fedora-all/pdfb
|ox=affected,bpms-6/pdfbox=a |ox=affected,bpms-6/pdfbox=a
|ffected/cvss2=3.3/AV:L/AC:M |ffected/cvss2=3.3/AV:L/AC:M
|/Au:N/C:P/I:N/A:P/cvss3=4.4 |/Au:N/C:P/I:N/A:P/cvss3=4.4
|/CVSS:3.0/AV:L/AC:L/PR:N/UI |/CVSS:3.0/AV:L/AC:L/PR:N/UI
|:R/S:U/C:L/I:N/A:L,brms-6/p |:R/S:U/C:L/I:N/A:L,brms-6/p
|dfbox=affected/cvss2=3.3/AV |dfbox=affected/cvss2=3.3/AV
|:L/AC:M/Au:N/C:P/I:N/A:P/cv |:L/AC:M/Au:N/C:P/I:N/A:P/cv
|ss3=4.4/CVSS:3.0/AV:L/AC:L/ |ss3=4.4/CVSS:3.0/AV:L/AC:L/
|PR:N/UI:R/S:U/C:L/I:N/A:L,j |PR:N/UI:R/S:U/C:L/I:N/A:L,j
|dv-6/pdfbox=affected,fuse-6 |dv-6/pdfbox=affected,jdv-7/
|/pdfbox=affected,fsw-6/pdfb |pdfbox=affected,fuse-6/pdfb
|ox=notaffected,jpp-6/pdfbox |ox=affected,fsw-6/pdfbox=no
|=affected,rhn_satellite_5/p |taffected,jpp-6/pdfbox=affe
|dfbox=affected |cted,rhn_satellite_5/pdfbox
| |=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 6 months