Red Hat Security AdvisoryRHSA-2013:0268
tomcat7 security update
Released 2013-02-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server tomcat7-7.0.30-3_patch_02.ep6.el5, tomcat7-admin-webapps-7.0.30-3_patch_02.ep6.el5, tomcat7-docs-webapp-7.0.30-3_patch_02.ep6.el5 +7
- Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server tomcat7-7.0.30-5_patch_02.ep6.el6, tomcat7-admin-webapps-7.0.30-5_patch_02.ep6.el6, tomcat7-docs-webapp-7.0.30-5_patch_02.ep6.el6 +7
Fixes 1 record
Priority LOW 38
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request th…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09146 · Published 2012-12-19 · Partial fix · 6.0.36, 7.0.32 CWE-264
