https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Eric Christensen <sparks(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|70919,reported=20170919,sou |70919,reported=20170918,sou
|rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS
|:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S:
|U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh
|el-7/tomcat=affected,rhscl- |el-7/tomcat=affected,rhscl-
|2/rh-java-common-tomcat=not |2/rh-java-common-tomcat=not
|affected,jbews-2/tomcat7=af |affected,jbews-2/tomcat7=af
|fected,jws-3/tomcat7=affect |fected,jws-3/tomcat7=affect
|ed,jws-3/tomcat8=notaffecte |ed,jws-3/tomcat8=notaffecte
|d,jdg-6/jbossweb=notaffecte |d,jdg-6/jbossweb=notaffecte
|d,jdv-6/jbossweb=notaffecte |d,jdv-6/jbossweb=notaffecte
|d,eap-6/jbossweb=notaffecte |d,eap-6/jbossweb=notaffecte
|d,fuse-6/jbossweb=notaffect |d,fuse-6/jbossweb=notaffect
|ed,jon-3/jbossweb=notaffect |ed,jon-3/jbossweb=notaffect
|ed,jpp-6/jbossweb=notaffect |ed,jpp-6/jbossweb=notaffect
|ed,openshift-1/jbossweb=not |ed,openshift-1/jbossweb=not
|affected,fedora-all/tomcat= |affected,fedora-all/tomcat=
|notaffected,epel-6/tomcat=n |notaffected,epel-6/tomcat=n
|otaffected,rhel-6/tomcat6=a |otaffected,rhel-6/tomcat6=a
|ffected,jbews-2/tomcat6=aff |ffected,jbews-2/tomcat6=aff
|ected |ected
--- Doc Text *updated* ---
A vulnerability was discovered in Tomcat where if a servlet context was configured with
readonly=false and HTTP PUT requests were allowed, an attacker could upload a JSP file to
that context and achieve code execution.
--
You are receiving this mail because:
You are on the CC list for the bug.