https://bugzilla.redhat.com/show_bug.cgi?id=1459158
Doran Moppert dmoppert@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70606,reported=20170606,sou |70606,reported=20170606,sou |rce=internet,cvss3=7.5/CVSS |rce=internet,cvss3=7.5/CVSS |:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S: |U/C:N/I:H/A:N,rhel-7/tomcat |U/C:N/I:H/A:N,rhel-7/tomcat |=affected,rhscl-2/rh-java-c |=affected,rhscl-2/rh-java-c |ommon-tomcat=notaffected,jb |ommon-tomcat=notaffected,jb |ews-2/tomcat7=affected,jws- |ews-2/tomcat7=affected,jws- |3/tomcat7=affected,jws-3/to |3/tomcat7=affected,jws-3/to |mcat8=affected,jdg-6/jbossw |mcat8=affected,jdg-6/jbossw |eb=notaffected,jdv-6/jbossw |eb=notaffected,jdv-6/jbossw |eb=notaffected,eap-6/jbossw |eb=notaffected,eap-6/jbossw |eb=affected,fsw-6/jbossweb= |eb=affected,fsw-6/jbossweb= |wontfix,fuse-6/jbossweb=new |wontfix,fuse-6/jbossweb=new |,fuse-6/tomcat7=new,fuse-6/ |,fuse-6/tomcat7=new,fuse-6/ |tomcat8=new,jon-3/jbossweb= |tomcat8=new,jon-3/jbossweb= |affected,jpp-6/jbossweb=aff |affected,jpp-6/jbossweb=aff |ected,openshift-1/jbossweb= |ected,openshift-1/jbossweb= |defer,fedora-all/tomcat=aff |defer,fedora-all/tomcat=aff |ected,epel-6/tomcat=affecte |ected,epel-6/tomcat=affecte |d,rhel-6/tomcat6=defer,jbew |d,rhel-6/tomcat6=affected,j |s-2/tomcat6=affected |bews-2/tomcat6=affected Flags| |needinfo?(twalsh@redhat.com | |)
--- Doc Text *updated* --- A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page.
--- Comment #20 from Doran Moppert dmoppert@redhat.com --- Tim, is this doctext accurate?