https://bugzilla.redhat.com/show_bug.cgi?id=1459158
--- Comment #15 from Doran Moppert dmoppert@redhat.com --- Statement:
This flaw can be triggered for static error pages only if the readonly property for the DefaultServlet is set to false in the $CATALINA_HOME/conf/web.xml file. The default for readonly is true.
Red Hat Enterprise Linux 6 is now in Production 3 Phase of the support and maintenance life cycle. This issue has been rated as having Important security impact and may be updated in future releases. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.