https://bugzilla.redhat.com/show_bug.cgi?id=1785699
--- Doc Text *updated* by Mauro Matteo Cascella <mcascell(a)redhat.com> ---
A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was
enabled. A local attacker without access to the Tomcat process or configuration files
could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The
attacker could then capture user names and passwords used to access the JMX interface and
gain complete control over the Tomcat instance.
--
You are receiving this mail because:
You are on the CC list for the bug.