TI-2020-01862 CVE-2020-1938 · GHSA-c9hw-wf7x-jp9j
Improper privilege management in Apache Tomcat
Priority CRITICAL 100KEV
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.
RHSA-2020:2367
Red Hat support for Spring Boot 2.1.13 security and bug fix update
Released 2020-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Runtimes Spring Boot 2.1.13
Fixes 4 records
TI-2020-01688 CVE-2020-1745 · GHSA-gv2w-88hx-8m9r
Improper authorization in undertow-io undertow
Priority MEDIUM 50
A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final.
TI-2020-01859 CVE-2020-1935 · GHSA-qxf4-chvg-4r8r
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header…
Priority MEDIUM 40
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid.
TI-2019-11092 CVE-2019-14888 · GHSA-vjxc-frw4-jmh5
Uncontrolled resource consumption in Red Hat undertow
Priority LOW 37
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS.