https://bugzilla.redhat.com/show_bug.cgi?id=1917209
--- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> ---
A flaw was found in Apache Tomcat. When serving resources from a network location using
the NTFS file system, it was possible to bypass security constraints and view the source
code for JSPs in some configurations. The root cause was the unexpected behavior of the
JRE API File.getCanonicalPath(), which was caused by the inconsistent behavior of the
Windows API (FindFirstFileW) in some circumstances. The highest threat from this
vulnerability is to confidentiality.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1917209