[Bug 1493222] CVE-2017-12616 tomcat: Information Disclosure when using VirtualDirContext
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1493222
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017
|0919,reported=20170919,sour |0919,reported=20170919,sour
|ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS:
|3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U
|/C:L/I:N/A:N,cwe=CWE-200,rh |/C:L/I:N/A:N,cwe=CWE-200,rh
|el-7/tomcat=wontfix,rhscl-2 |el-7/tomcat=wontfix,rhscl-2
|/rh-java-common-tomcat=nota |/rh-java-common-tomcat=nota
|ffected,jbews-2/tomcat7=won |ffected,jbews-2/tomcat7=won
|tfix,jws-3/tomcat7=affected |tfix,jws-3/tomcat7=affected
|,jws-3/tomcat8=notaffected, |,jws-3/tomcat8=notaffected,
|jdg-6/jbossweb=notaffected, |jdg-6/jbossweb=notaffected,
|jdv-6/jbossweb=notaffected, |jdv-6/jbossweb=notaffected,
|eap-6/jbossweb=wontfix,fuse |eap-6/jbossweb=wontfix,fuse
|-6/jbossweb=notaffected,jon |-6/jbossweb=notaffected,jon
|-3/jbossweb=wontfix,jpp-6/j |-3/jbossweb=wontfix,jpp-6/j
|bossweb=wontfix,openshift-1 |bossweb=wontfix,openshift-1
|/jbossweb=affected,fedora-a |/jbossweb=affected,fedora-a
|ll/tomcat=notaffected,epel- |ll/tomcat=notaffected,epel-
|6/tomcat=affected,rhel-6/to |6/tomcat=affected,rhel-6/to
|mcat6=wontfix |mcat6=wontfix,rhel-5/tomcat
| |5=notaffected
--- Comment #7 from Doran Moppert <dmoppert(a)redhat.com> ---
Tomcat 5, provided with Red Hat Enterprise Linux 5, is not affected by this
issue.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months