Red Hat Security AdvisoryRHSA-2015:1622
Red Hat JBoss Web Server 2.1.0 tomcat security update
Released 2015-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server tomcat6-6.0.41-15_patch_04.ep6.el5, tomcat6-admin-webapps-6.0.41-15_patch_04.ep6.el5, tomcat6-docs-webapp-6.0.41-15_patch_04.ep6.el5 +19
- Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server tomcat6-6.0.41-15_patch_04.ep6.el6, tomcat6-admin-webapps-6.0.41-15_patch_04.ep6.el6, tomcat6-docs-webapp-6.0.41-15_patch_04.ep6.el6 +19
- Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server tomcat6-6.0.41-15_patch_04.ep6.el7, tomcat6-admin-webapps-6.0.41-15_patch_04.ep6.el7, tomcat6-docs-webapp-6.0.41-15_patch_04.ep6.el7 +19
Fixes 2 records
Priority MEDIUM 59
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.20183 · Published 2015-06-07 · Partial fix · 6.0.44, 7.0.55 +1 CWE-399
Priority MEDIUM 44
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessibl…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13349 · Published 2015-06-07 · Partial fix · 6.0.44, 7.0.58 +1 CWE-284
