Red Hat Security AdvisoryRHSA-2013:0964
tomcat6 security update
Released 2013-06-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-57.el6_4, tomcat6-admin-webapps-6.0.24-57.el6_4, tomcat6-docs-webapp-6.0.24-57.el6_4 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-57.el6_4, tomcat6-admin-webapps-6.0.24-57.el6_4, tomcat6-docs-webapp-6.0.24-57.el6_4 +6
- Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-57.el6_4, tomcat6-el-2.1-api-6.0.24-57.el6_4, tomcat6-jsp-2.1-api-6.0.24-57.el6_4 +2
- Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-6.0.24-57.el6_4, tomcat6-admin-webapps-6.0.24-57.el6_4, tomcat6-docs-webapp-6.0.24-57.el6_4 +2
- Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-57.el6_4, tomcat6-el-2.1-api-6.0.24-57.el6_4, tomcat6-jsp-2.1-api-6.0.24-57.el6_4 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-6.0.24-57.el6_4, tomcat6-admin-webapps-6.0.24-57.el6_4, tomcat6-docs-webapp-6.0.24-57.el6_4 +2
Fixes 1 record
Priority MEDIUM 43
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authenticat…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.10407 · Published 2013-06-01 · Partial fix · 6.0.37, 7.0.33 CWE-287
