Red Hat Security AdvisoryRHSA-2020:2530
tomcat security update
Released 2020-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tomcat-7.0.76-12.el7_8, tomcat-servlet-3.0-api-7.0.76-12.el7_8
- Red Hat Enterprise Linux Client Optional (v. 7) tomcat-7.0.76-12.el7_8, tomcat-admin-webapps-7.0.76-12.el7_8, tomcat-docs-webapp-7.0.76-12.el7_8 +6
- Red Hat Enterprise Linux ComputeNode (v. 7) tomcat-7.0.76-12.el7_8, tomcat-servlet-3.0-api-7.0.76-12.el7_8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tomcat-7.0.76-12.el7_8, tomcat-admin-webapps-7.0.76-12.el7_8, tomcat-docs-webapp-7.0.76-12.el7_8 +6
- Red Hat Enterprise Linux Server (v. 7) tomcat-7.0.76-12.el7_8, tomcat-admin-webapps-7.0.76-12.el7_8, tomcat-el-2.2-api-7.0.76-12.el7_8 +4
- Red Hat Enterprise Linux Server Optional (v. 7) tomcat-7.0.76-12.el7_8, tomcat-admin-webapps-7.0.76-12.el7_8, tomcat-docs-webapp-7.0.76-12.el7_8 +6
- Red Hat Enterprise Linux Workstation (v. 7) tomcat-7.0.76-12.el7_8, tomcat-admin-webapps-7.0.76-12.el7_8, tomcat-el-2.2-api-7.0.76-12.el7_8 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) tomcat-docs-webapp-7.0.76-12.el7_8, tomcat-javadoc-7.0.76-12.el7_8, tomcat-jsvc-7.0.76-12.el7_8
Fixes 1 record
Priority HIGH 66
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.5552 · Published 2020-05-20 · Partial fix · 10.0.0-M5, 9.0.35 +2 CWE-502
