https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #8 from Doran Moppert dmoppert@redhat.com --- Statement:
This flaw affects Tomcat on Red Hat Enterprise Linux only if the DefaultServlet is configured with readonly=false. The default configuration has a readonly context, so it is not affected.