TI-2020-01862 CVE-2020-1938 · GHSA-c9hw-wf7x-jp9j
Improper privilege management in Apache Tomcat
Priority CRITICAL 100KEV
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.
RHSA-2020:0855
tomcat security update
Released 2020-03-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tomcat-7.0.76-11.el7_7, tomcat-servlet-3.0-api-7.0.76-11.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) tomcat-7.0.76-11.el7_7, tomcat-admin-webapps-7.0.76-11.el7_7, tomcat-docs-webapp-7.0.76-11.el7_7 +6
- Red Hat Enterprise Linux ComputeNode (v. 7) tomcat-7.0.76-11.el7_7, tomcat-servlet-3.0-api-7.0.76-11.el7_7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tomcat-7.0.76-11.el7_7, tomcat-admin-webapps-7.0.76-11.el7_7, tomcat-docs-webapp-7.0.76-11.el7_7 +6
- Red Hat Enterprise Linux Server (v. 7) tomcat-7.0.76-11.el7_7, tomcat-admin-webapps-7.0.76-11.el7_7, tomcat-el-2.2-api-7.0.76-11.el7_7 +4
- Red Hat Enterprise Linux Server Optional (v. 7) tomcat-7.0.76-11.el7_7, tomcat-admin-webapps-7.0.76-11.el7_7, tomcat-docs-webapp-7.0.76-11.el7_7 +6
- Red Hat Enterprise Linux Workstation (v. 7) tomcat-7.0.76-11.el7_7, tomcat-admin-webapps-7.0.76-11.el7_7, tomcat-el-2.2-api-7.0.76-11.el7_7 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) tomcat-docs-webapp-7.0.76-11.el7_7, tomcat-javadoc-7.0.76-11.el7_7, tomcat-jsvc-7.0.76-11.el7_7