TI-2018-08441 CVE-2018-11784 · GHSA-5q99-f34m-67gc
Open redirect in Apache Tomcat
Priority HIGH 65
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.
RHSA-2018:2868
Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update
Released 2018-10-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Web Server 5.0 for RHEL 6 Server jws5-tomcat-9.0.7-12.redhat_12.1.el6jws, jws5-tomcat-admin-webapps-9.0.7-12.redhat_12.1.el6jws, jws5-tomcat-docs-webapp-9.0.7-12.redhat_12.1.el6jws +8
- Red Hat JBoss Web Server 5.0 for RHEL 7 Server jws5-tomcat-9.0.7-12.redhat_12.1.el7jws, jws5-tomcat-admin-webapps-9.0.7-12.redhat_12.1.el7jws, jws5-tomcat-docs-webapp-9.0.7-12.redhat_12.1.el7jws +8
Fixes 2 records
TI-2018-05814 CVE-2018-8037 · GHSA-6v52-mj5r-7j2m
Race condition in Apache Tomcat
Priority MEDIUM 40
If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user.