[Bug 1607582] CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1607582
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|80722,reported=20180722,sou |80722,reported=20180722,sou
|rce=internet,cvss3=9.1/CVSS |rce=internet,cvss3=9.1/CVSS
|:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S:
|U/C:H/I:H/A:N,fedora-all/to |U/C:H/I:H/A:N,fedora-all/to
|mcat=affected,rhscl-3/rh-ja |mcat=affected,rhscl-3/rh-ja
|va-common-tomcat=notaffecte |va-common-tomcat=notaffecte
|d,bpms-6/tomcat=notaffected |d,bpms-6/tomcat=notaffected
|,epel-all/tomcat=affected,b |,epel-all/tomcat=affected,b
|rms-6/tomcat=notaffected,br |rms-6/tomcat=notaffected,br
|ms-5/jbossweb=notaffected,e |ms-5/jbossweb=notaffected,e
|ap-6/jbossweb=notaffected,e |ap-6/jbossweb=notaffected,e
|ap-5/jbossweb=notaffected,j |ap-5/jbossweb=notaffected,j
|dg-6/jbossweb=notaffected,j |dg-6/jbossweb=notaffected,j
|dg-7/tomcat=notaffected,jdv |dg-7/tomcat=notaffected,jdv
|-6/jbossweb=notaffected,fus |-6/jbossweb=notaffected,fus
|e-6/tomcat=notaffected,fuse |e-6/tomcat=notaffected,fuse
|-7/tomcat=notaffected,soap- |-7/tomcat=notaffected,soap-
|5/jbossweb=notaffected,fsw- |5/jbossweb=notaffected,fsw-
|6/jbossweb=notaffected,spri |6/jbossweb=notaffected,spri
|ngboot-1/tomcat=affected,jb |ngboot-1/tomcat=affected,jb
|ews-2/tomcat6=notaffected,j |ews-2/tomcat6=notaffected,j
|ws-3/tomcat7=notaffected,jb |ws-3/tomcat7=notaffected,jb
|ews-2/tomcat7=notaffected,r |ews-2/tomcat7=notaffected,r
|hel-7/tomcat=notaffected,jw |hel-7/tomcat=notaffected,jw
|s-3/tomcat8=notaffected,rhe |s-3/tomcat8=notaffected,rhe
|l-6/tomcat6=notaffected,jon |l-6/tomcat6=notaffected,jon
|-3/jbossweb=notaffected,jws |-3/jbossweb=notaffected,jws
|-5/tomcat=affected,rhel-8/p |-5/tomcat=affected,rhel-8/p
|ki-servlet-container=affect |ki-deps:10.6/pki-servlet-co
|ed |ntainer=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years
[Bug 1636512] CVE-2018-11784 tomcat: Open redirect in default servlet
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1636512
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|1003,reported=20181003,sour |1003,reported=20181003,sour
|ce=internet,cvss3=5.3/CVSS: |ce=internet,cvss3=5.3/CVSS:
|3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U
|/C:N/I:L/A:N,cwe=CWE-99,fed |/C:N/I:L/A:N,cwe=CWE-99,fed
|ora-all/tomcat=affected,rhs |ora-all/tomcat=affected,rhs
|cl-3/rh-java-common-tomcat= |cl-3/rh-java-common-tomcat=
|notaffected,bpms-6/tomcat=n |notaffected,bpms-6/tomcat=n
|ew,brms-6/tomcat=new,epel-a |ew,brms-6/tomcat=new,epel-a
|ll/tomcat=affected,brms-5/j |ll/tomcat=affected,brms-5/j
|bossweb=new,eap-6/jbossweb= |bossweb=new,eap-6/jbossweb=
|new,eap-5/jbossweb=new,jdg- |new,eap-5/jbossweb=new,jdg-
|6/jbossweb=new,jdg-7/tomcat |6/jbossweb=new,jdg-7/tomcat
|=new,jdv-6/jbossweb=new,fus |=new,jdv-6/jbossweb=new,fus
|e-6/tomcat=new,fuse-7/tomca |e-6/tomcat=new,fuse-7/tomca
|t=new,fsw-6/jbossweb=new,so |t=new,fsw-6/jbossweb=new,so
|ap-5/jbossweb=new,springboo |ap-5/jbossweb=new,springboo
|t-1/tomcat=new,jbews-2/tomc |t-1/tomcat=new,jbews-2/tomc
|at6=notaffected,jws-3/tomca |at6=notaffected,jws-3/tomca
|t7=affected,rhel-7/tomcat=a |t7=affected,rhel-7/tomcat=a
|ffected,jbews-2/tomcat7=won |ffected,jbews-2/tomcat7=won
|tfix,jws-3/tomcat8=affected |tfix,jws-3/tomcat8=affected
|,rhel-6/tomcat6=notaffected |,rhel-6/tomcat6=notaffected
|,jon-3/jbossweb=new,jws-5/t |,jon-3/jbossweb=new,jws-5/t
|omcat=notaffected,rhel-8/pk |omcat=notaffected,rhel-8/pk
|i-servlet-container=affecte |i-deps:10.6/pki-servlet-con
|d |tainer=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years