TI-2018-08441 CVE-2018-11784 · GHSA-5q99-f34m-67gc
Open redirect in Apache Tomcat
Priority HIGH 65
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.
RHSA-2019:0485
tomcat security update
Released 2019-03-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tomcat-7.0.76-9.el7_6, tomcat-servlet-3.0-api-7.0.76-9.el7_6
- Red Hat Enterprise Linux Client Optional (v. 7) tomcat-7.0.76-9.el7_6, tomcat-admin-webapps-7.0.76-9.el7_6, tomcat-docs-webapp-7.0.76-9.el7_6 +6
- Red Hat Enterprise Linux ComputeNode (v. 7) tomcat-7.0.76-9.el7_6, tomcat-servlet-3.0-api-7.0.76-9.el7_6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tomcat-7.0.76-9.el7_6, tomcat-admin-webapps-7.0.76-9.el7_6, tomcat-docs-webapp-7.0.76-9.el7_6 +6
- Red Hat Enterprise Linux Server (v. 7) tomcat-7.0.76-9.el7_6, tomcat-admin-webapps-7.0.76-9.el7_6, tomcat-el-2.2-api-7.0.76-9.el7_6 +4
- Red Hat Enterprise Linux Server Optional (v. 7) tomcat-7.0.76-9.el7_6, tomcat-admin-webapps-7.0.76-9.el7_6, tomcat-docs-webapp-7.0.76-9.el7_6 +6
- Red Hat Enterprise Linux Workstation (v. 7) tomcat-7.0.76-9.el7_6, tomcat-admin-webapps-7.0.76-9.el7_6, tomcat-el-2.2-api-7.0.76-9.el7_6 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) tomcat-docs-webapp-7.0.76-9.el7_6, tomcat-javadoc-7.0.76-9.el7_6, tomcat-jsvc-7.0.76-9.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) tomcat-7.0.76-9.el7_6, tomcat-admin-webapps-7.0.76-9.el7_6, tomcat-el-2.2-api-7.0.76-9.el7_6 +4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) tomcat-7.0.76-9.el7_6, tomcat-admin-webapps-7.0.76-9.el7_6, tomcat-docs-webapp-7.0.76-9.el7_6 +6