TI-2020-01862 CVE-2020-1938 · GHSA-c9hw-wf7x-jp9j
Improper privilege management in Apache Tomcat
Priority CRITICAL 100KEV
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.
RHSA-2020:0912
tomcat6 security update
Released 2020-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-114.el6_10, tomcat6-admin-webapps-6.0.24-114.el6_10, tomcat6-docs-webapp-6.0.24-114.el6_10 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-114.el6_10, tomcat6-admin-webapps-6.0.24-114.el6_10, tomcat6-docs-webapp-6.0.24-114.el6_10 +6
- Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-114.el6_10, tomcat6-el-2.1-api-6.0.24-114.el6_10, tomcat6-jsp-2.1-api-6.0.24-114.el6_10 +2
- Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-admin-webapps-6.0.24-114.el6_10, tomcat6-docs-webapp-6.0.24-114.el6_10, tomcat6-javadoc-6.0.24-114.el6_10 +1
- Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-114.el6_10, tomcat6-el-2.1-api-6.0.24-114.el6_10, tomcat6-jsp-2.1-api-6.0.24-114.el6_10 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-admin-webapps-6.0.24-114.el6_10, tomcat6-docs-webapp-6.0.24-114.el6_10, tomcat6-javadoc-6.0.24-114.el6_10 +1