https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Bug ID: 1222573 Summary: CVE-2014-7810 Tomcat/JbossWeb: security manager bypass via EL expressions Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: mprpic@redhat.com CC: aileenc@redhat.com, alazarot@redhat.com, alee@redhat.com, asantos@redhat.com, aszczucz@redhat.com, bdawidow@redhat.com, bgollahe@redhat.com, ccoleman@redhat.com, cdewolf@redhat.com, chazlett@redhat.com, dandread@redhat.com, darran.lofthouse@redhat.com, dknox@redhat.com, dmcphers@redhat.com, epp-bugs@redhat.com, etirelli@redhat.com, felias@redhat.com, gvarsami@redhat.com, hchiorea@redhat.com, hfnukal@redhat.com, ivan.afonichev@gmail.com, jason.greene@redhat.com, java-sig-commits@lists.fedoraproject.org, jawilson@redhat.com, jboss-set@redhat.com, jbpapp-maint@redhat.com, jclere@redhat.com, jcoleman@redhat.com, jdg-bugs@redhat.com, jdoyle@redhat.com, jialiu@redhat.com, joelsmith@redhat.com, jokerman@redhat.com, jolee@redhat.com, jpallich@redhat.com, kanderso@redhat.com, kconner@redhat.com, krzysztof.daniel@gmail.com, kseifried@redhat.com, ldimaggi@redhat.com, lgao@redhat.com, lkocman@redhat.com, lmeyer@redhat.com, lpetrovi@redhat.com, mbaluch@redhat.com, me@coolsvap.net, mfranc@redhat.com, mmccomas@redhat.com, mweiler@redhat.com, mwinkler@redhat.com, myarboro@redhat.com, nwallace@redhat.com, pavelp@redhat.com, pgier@redhat.com, pslavice@redhat.com, rhq-maint@redhat.com, rrajasek@redhat.com, rsvoboda@redhat.com, rwagner@redhat.com, rzhang@redhat.com, soa-p-jira@post-office.corp.redhat.com, spinder@redhat.com, tcunning@redhat.com, theute@redhat.com, tkirby@redhat.com, tmlcoch@redhat.com, ttarrant@redhat.com, twalsh@redhat.com, vhalbert@redhat.com, vtunka@redhat.com, weli@redhat.com
It was found that the expression language resolver evaluated expressions within a privileged code section. A malicious web application could use this flaw to bypass security manager protections.
Upstream patches:
http://svn.apache.org/viewvc?view=revision&revision=1644019 http://svn.apache.org/viewvc?view=revision&revision=1645644
External References:
http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44 http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.59 http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.17
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Martin Prpic mprpic@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1222576 Depends On| |1222577
--- Comment #1 from Martin Prpic mprpic@redhat.com ---
Created tomcat tracking bugs for this issue:
Affects: fedora-all [bug 1222576] Affects: epel-6 [bug 1222577]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1222576 [Bug 1222576] CVE-2014-7810 tomcat: Tomcat/JbossWeb: security manager bypass via EL expressions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1222577 [Bug 1222577] CVE-2014-7810 tomcat: Tomcat/JbossWeb: security manager bypass via EL expressions [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Martin Prpic mprpic@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1222578
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1227586 Depends On| |1227587
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Md Azhar mdshaikh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mdshaikh@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=affected,dts-3.0/de |-tomcat=affected,dts-3.0/de |vtoolset-3-tomcat=affected, |vtoolset-3-tomcat=affected, |fedora-all/tomcat=affected, |fedora-all/tomcat=affected, |epel-6/tomcat=affected,jbew |epel-6/tomcat=affected,jbew |s-1/tomcat6=affected,jbews- |s-1/tomcat6=affected,jbews- |2/tomcat6=affected,jbews-2/ |2/tomcat6=affected,jbews-2/ |tomcat7=affected,jdg-6/jbos |tomcat7=affected,jdg-6/jbos |sweb=new,jdv-6/jbossweb=new |sweb=new,jdv-6/jbossweb=new |,eap-6/jbossweb=new,brms-6/ |,eap-6/jbossweb=affected,ea |jbossweb=new,bpms-6/jbosswe |p-7/jbossweb=affected,brms- |b=new,jpp-6/jbossweb=new,so |6/jbossweb=new,bpms-6/jboss |ap-4/jbossweb=new,soap-5/jb |web=new,jpp-6/jbossweb=new, |ossweb=new,fsw-6/jbossweb=n |soap-4/jbossweb=new,soap-5/ |ew,jon-3/jbossweb=new,opens |jbossweb=new,fsw-6/jbossweb |hift-1/tomcat7=new |=new,jon-3/jbossweb=new,ope | |nshift-1/tomcat7=new
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=affected,dts-3.0/de |-tomcat=affected,dts-3.0/de |vtoolset-3-tomcat=affected, |vtoolset-3-tomcat=affected, |fedora-all/tomcat=affected, |fedora-all/tomcat=affected, |epel-6/tomcat=affected,jbew |epel-6/tomcat=affected,jbew |s-1/tomcat6=affected,jbews- |s-1/tomcat6=affected,jbews- |2/tomcat6=affected,jbews-2/ |2/tomcat6=affected,jbews-2/ |tomcat7=affected,jdg-6/jbos |tomcat7=affected,jdg-6/jbos |sweb=new,jdv-6/jbossweb=new |sweb=new,jdv-6/jbossweb=new |,eap-6/jbossweb=affected,ea |,eap-6/jbossweb=affected,br |p-7/jbossweb=affected,brms- |ms-6/jbossweb=new,bpms-6/jb |6/jbossweb=new,bpms-6/jboss |ossweb=new,jpp-6/jbossweb=n |web=new,jpp-6/jbossweb=new, |ew,soap-4/jbossweb=new,soap |soap-4/jbossweb=new,soap-5/ |-5/jbossweb=new,fsw-6/jboss |jbossweb=new,fsw-6/jbossweb |web=new,jon-3/jbossweb=new, |=new,jon-3/jbossweb=new,ope |openshift-1/tomcat7=new |nshift-1/tomcat7=new |
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=affected,dts-3.0/de |-tomcat=affected,dts-3.0/de |vtoolset-3-tomcat=affected, |vtoolset-3-tomcat=affected, |fedora-all/tomcat=affected, |fedora-all/tomcat=affected, |epel-6/tomcat=affected,jbew |epel-6/tomcat=affected,jbew |s-1/tomcat6=affected,jbews- |s-1/tomcat6=affected,jbews- |2/tomcat6=affected,jbews-2/ |2/tomcat6=affected,jbews-2/ |tomcat7=affected,jdg-6/jbos |tomcat7=affected,jdg-6/jbos |sweb=new,jdv-6/jbossweb=new |sweb=new,jdv-6/jbossweb=new |,eap-6/jbossweb=affected,br |,eap-6/jbossweb=affected,ea |ms-6/jbossweb=new,bpms-6/jb |p-6.3.z/jbossweb=affected,e |ossweb=new,jpp-6/jbossweb=n |ap-6.4.z/jbossweb=affected, |ew,soap-4/jbossweb=new,soap |brms-6/jbossweb=new,bpms-6/ |-5/jbossweb=new,fsw-6/jboss |jbossweb=new,jpp-6/jbossweb |web=new,jon-3/jbossweb=new, |=new,soap-4/jbossweb=new,so |openshift-1/tomcat7=new |ap-5/jbossweb=new,fsw-6/jbo | |ssweb=new,jon-3/jbossweb=ne | |w,openshift-1/tomcat7=new
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=affected,dts-3.0/de |-tomcat=affected,dts-3.0/de |vtoolset-3-tomcat=affected, |vtoolset-3-tomcat=affected, |fedora-all/tomcat=affected, |fedora-all/tomcat=affected, |epel-6/tomcat=affected,jbew |epel-6/tomcat=affected,jbew |s-1/tomcat6=affected,jbews- |s-1/tomcat6=affected,jbews- |2/tomcat6=affected,jbews-2/ |2/tomcat6=affected,jbews-2/ |tomcat7=affected,jdg-6/jbos |tomcat7=affected,jdg-6/jbos |sweb=new,jdv-6/jbossweb=new |sweb=new,jdv-6/jbossweb=new |,eap-6/jbossweb=affected,ea |,eap-6/jbossweb=affected,br |p-6.3.z/jbossweb=affected,e |ms-6/jbossweb=new,bpms-6/jb |ap-6.4.z/jbossweb=affected, |ossweb=new,jpp-6/jbossweb=n |brms-6/jbossweb=new,bpms-6/ |ew,soap-4/jbossweb=new,soap |jbossweb=new,jpp-6/jbossweb |-5/jbossweb=new,fsw-6/jboss |=new,soap-4/jbossweb=new,so |web=new,jon-3/jbossweb=new, |ap-5/jbossweb=new,fsw-6/jbo |openshift-1/tomcat7=new |ssweb=new,jon-3/jbossweb=ne | |w,openshift-1/tomcat7=new |
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1228262 Depends On| |1228263
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Horia Chiorean hchiorea@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC|hchiorea@redhat.com |
--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
--- Doc Text *updated* by Martin Prpic mprpic@redhat.com --- It was found that the expression language resolver evaluated expressions within a privileged code section. A malicious web application could use this flaw to bypass security manager protections.
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
--- Comment #6 from Timothy Walsh twalsh@redhat.com --- Currently builds are in progress for EAP 6.3 and JB Web Server 2.1.
QE Testing is in progress.
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Ganesh gnaik@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |gnaik@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1253310
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
--- Comment #10 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
JBEWS 2 for RHEL 7 JBEWS 2 for RHEL 6 JBEWS 2 for RHEL 5
Via RHSA-2015:1622 https://rhn.redhat.com/errata/RHSA-2015-1622.html
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
--- Comment #11 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Via RHSA-2015:1621 https://rhn.redhat.com/errata/RHSA-2015-1621.html
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED CC| |jshepherd@redhat.com Resolution|--- |CURRENTRELEASE Last Closed| |2015-09-23 19:59:32
https://bugzilla.redhat.com/show_bug.cgi?id=1222573 Bug 1222573 depends on bug 1222576, which changed state.
Bug 1222576 Summary: CVE-2014-7810 tomcat: Tomcat/JbossWeb: security manager bypass via EL expressions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1222576
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1293289 Depends On| |1293290 Depends On| |1293291 Depends On| |1293292
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |ASSIGNED Resolution|CURRENTRELEASE |--- Keywords| |Reopened
--- Comment #15 from Jason Shepherd jshepherd@redhat.com --- Reopened as we're waiting on RHEL patches for Tomcat
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1298491
https://bugzilla.redhat.com/show_bug.cgi?id=1222573 Bug 1222573 depends on bug 1222577, which changed state.
Bug 1222577 Summary: CVE-2014-7810 tomcat: Tomcat/JbossWeb: security manager bypass via EL expressions [epel-6] https://bugzilla.redhat.com/show_bug.cgi?id=1222577
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks|1298491 |
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
--- Comment #16 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2016:0492 https://rhn.redhat.com/errata/RHSA-2016-0492.html
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=affected,dts-3.0/de |-tomcat=affected,dts-3/devt |vtoolset-3-tomcat=affected, |oolset-3-tomcat=affected,fe |fedora-all/tomcat=affected, |dora-all/tomcat=affected,ep |epel-6/tomcat=affected,jbew |el-6/tomcat=affected,jbews- |s-1/tomcat6=affected,jbews- |1/tomcat6=affected,jbews-2/ |2/tomcat6=affected,jbews-2/ |tomcat6=affected,jbews-2/to |tomcat7=affected,jdg-6/jbos |mcat7=affected,jdg-6/jbossw |sweb=new,jdv-6/jbossweb=new |eb=new,jdv-6/jbossweb=new,e |,eap-6/jbossweb=affected,br |ap-6/jbossweb=affected,brms |ms-6/jbossweb=new,bpms-6/jb |-6/jbossweb=new,bpms-6/jbos |ossweb=new,jpp-6/jbossweb=n |sweb=new,jpp-6/jbossweb=new |ew,soap-4/jbossweb=new,soap |,soap-4/jbossweb=new,soap-5 |-5/jbossweb=new,fsw-6/jboss |/jbossweb=new,fsw-6/jbosswe |web=new,jon-3/jbossweb=new, |b=new,jon-3/jbossweb=new,op |openshift-1/tomcat7=new |enshift-1/tomcat7=new
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEW
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Pavel Polischouk pavelp@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=affected,dts-3/devt |-tomcat=affected,dts-3/devt |oolset-3-tomcat=affected,fe |oolset-3-tomcat=affected,fe |dora-all/tomcat=affected,ep |dora-all/tomcat=affected,ep |el-6/tomcat=affected,jbews- |el-6/tomcat=affected,jbews- |1/tomcat6=affected,jbews-2/ |1/tomcat6=affected,jbews-2/ |tomcat6=affected,jbews-2/to |tomcat6=affected,jbews-2/to |mcat7=affected,jdg-6/jbossw |mcat7=affected,jdg-6/jbossw |eb=new,jdv-6/jbossweb=new,e |eb=new,jdv-6/jbossweb=notaf |ap-6/jbossweb=affected,brms |fected,eap-6/jbossweb=affec |-6/jbossweb=new,bpms-6/jbos |ted,brms-6/jbossweb=notaffe |sweb=new,jpp-6/jbossweb=new |cted,bpms-6/jbossweb=notaff |,soap-4/jbossweb=new,soap-5 |ected,jpp-6/jbossweb=new,so |/jbossweb=new,fsw-6/jbosswe |ap-4/jbossweb=wontfix,soap- |b=new,jon-3/jbossweb=new,op |5/jbossweb=wontfix,fsw-6/jb |enshift-1/tomcat7=new |ossweb=notaffected,jon-3/jb | |ossweb=new,openshift-1/tomc | |at7=new
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
--- Comment #18 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2016:2046 https://rhn.redhat.com/errata/RHSA-2016-2046.html
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=affected,dts-3/devt |-tomcat=notaffected,dts-3/d |oolset-3-tomcat=affected,fe |evtoolset-3-tomcat=notaffec |dora-all/tomcat=affected,ep |ted,fedora-all/tomcat=affec |el-6/tomcat=affected,jbews- |ted,epel-6/tomcat=affected, |1/tomcat6=affected,jbews-2/ |jbews-1/tomcat6=affected,jb |tomcat6=affected,jbews-2/to |ews-2/tomcat6=affected,jbew |mcat7=affected,jdg-6/jbossw |s-2/tomcat7=affected,jdg-6/ |eb=new,jdv-6/jbossweb=notaf |jbossweb=new,jdv-6/jbossweb |fected,eap-6/jbossweb=affec |=notaffected,eap-6/jbossweb |ted,brms-6/jbossweb=notaffe |=affected,brms-6/jbossweb=n |cted,bpms-6/jbossweb=notaff |otaffected,bpms-6/jbossweb= |ected,jpp-6/jbossweb=new,so |notaffected,jpp-6/jbossweb= |ap-4/jbossweb=wontfix,soap- |new,soap-4/jbossweb=wontfix |5/jbossweb=wontfix,fsw-6/jb |,soap-5/jbossweb=wontfix,fs |ossweb=notaffected,jon-3/jb |w-6/jbossweb=notaffected,jo |ossweb=new,openshift-1/tomc |n-3/jbossweb=new,openshift- |at7=new |1/tomcat7=new
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Chess Hazlett chazlett@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015 |0514,reported=20150514,sour |0514,reported=20150514,sour |ce=internet,cvss2=5.8/AV:N/ |ce=internet,cvss2=5.8/AV:N/ |AC:M/Au:N/C:P/I:P/A:N,rhel- |AC:M/Au:N/C:P/I:P/A:N,rhel- |5/tomcat5=new,rhel-6/tomcat |5/tomcat5=new,rhel-6/tomcat |6=affected,rhel-7/tomcat=af |6=affected,rhel-7/tomcat=af |fected,dts-2.1/devtoolset-2 |fected,dts-2.1/devtoolset-2 |-tomcat=notaffected,dts-3/d |-tomcat=notaffected,dts-3/d |evtoolset-3-tomcat=notaffec |evtoolset-3-tomcat=notaffec |ted,fedora-all/tomcat=affec |ted,fedora-all/tomcat=affec |ted,epel-6/tomcat=affected, |ted,epel-6/tomcat=affected, |jbews-1/tomcat6=affected,jb |jbews-1/tomcat6=affected,jb |ews-2/tomcat6=affected,jbew |ews-2/tomcat6=affected,jbew |s-2/tomcat7=affected,jdg-6/ |s-2/tomcat7=affected,jdg-6/ |jbossweb=new,jdv-6/jbossweb |jbossweb=new,jdv-6/jbossweb |=notaffected,eap-6/jbossweb |=notaffected,eap-6/jbossweb |=affected,brms-6/jbossweb=n |=affected,brms-6/jbossweb=n |otaffected,bpms-6/jbossweb= |otaffected,bpms-6/jbossweb= |notaffected,jpp-6/jbossweb= |notaffected,jpp-6/jbossweb= |new,soap-4/jbossweb=wontfix |wontfix,soap-4/jbossweb=won |,soap-5/jbossweb=wontfix,fs |tfix,soap-5/jbossweb=wontfi |w-6/jbossweb=notaffected,jo |x,fsw-6/jbossweb=notaffecte |n-3/jbossweb=new,openshift- |d,jon-3/jbossweb=new,opensh |1/tomcat7=new |ift-1/tomcat7=new
https://bugzilla.redhat.com/show_bug.cgi?id=1222573
Chess Hazlett chazlett@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |ERRATA Last Closed|2015-09-23 19:59:32 |2017-01-24 18:04:02
java-sig-commits@lists.fedoraproject.org