--- Doc Text *updated* by Michael Kaplan <mkaplan(a)redhat.com> ---
A flaw was found in Apache Tomcat. The HTTP header parsing code used an approach to
end-of-line (EOL) parsing that allowed some invalid HTTP headers to be parsed as valid.
This led to the possibility of HTTP Request Smuggling if Tomcat was located behind a
reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a
particular manner. The highest threat with this vulnerability is system availability.
You are receiving this mail because:
You are on the CC list for the bug.