Red Hat Security Advisory

RHSA-2020:2483

Red Hat JBoss Web Server 3.1 Service Pack 9 security update

Released 2020-06-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 3.1 for RHEL 6 tomcat-native-1.2.23-22.redhat_22.ep7.el6, tomcat7-7.0.70-40.ep7.el6, tomcat7-admin-webapps-7.0.70-40.ep7.el6 +22
Red Hat JBoss Web Server 3.1 for RHEL 7 tomcat-native-1.2.23-22.redhat_22.ep7.el7, tomcat7-7.0.70-40.ep7.el7, tomcat7-admin-webapps-7.0.70-40.ep7.el7 +22

Fixes 1 record

TI-2020-07593 CVE-2020-9484 · GHSA-344f-f5vg-2jfj

Deserialization of untrusted data in Apache Tomcat

HIGH 66

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.5552 Published 2020-05-20 Partial fix · 10.0.0-M5, 9.0.35 +2 CWE-502