https://bugzilla.redhat.com/show_bug.cgi?id=1459158
--- Doc Text *updated* by Eric Christensen sparks@redhat.com --- A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page.