https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Doc Text *updated* by Doran Moppert dmoppert@redhat.com --- A vulnerabiity was discovered in Tomcat. If a servlet context was configured with readonly=false and HTTP PUT requests were allowed, an attacker could upload a JSP file to that context and achieve code execution.