TI-2020-01862 CVE-2020-1938 · GHSA-c9hw-wf7x-jp9j
Improper privilege management in Apache Tomcat
Priority CRITICAL 100KEV
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.
RHSA-2020:2840
tomcat security update
Released 2020-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) tomcat-7.0.76-10.el7_6, tomcat-servlet-3.0-api-7.0.76-10.el7_6
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) tomcat-7.0.76-10.el7_6, tomcat-admin-webapps-7.0.76-10.el7_6, tomcat-docs-webapp-7.0.76-10.el7_6 +6
- Red Hat Enterprise Linux Server EUS (v. 7.6) tomcat-7.0.76-10.el7_6, tomcat-admin-webapps-7.0.76-10.el7_6, tomcat-el-2.2-api-7.0.76-10.el7_6 +4
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) tomcat-7.0.76-10.el7_6, tomcat-admin-webapps-7.0.76-10.el7_6, tomcat-docs-webapp-7.0.76-10.el7_6 +6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) tomcat-7.0.76-10.el7_6, tomcat-admin-webapps-7.0.76-10.el7_6, tomcat-el-2.2-api-7.0.76-10.el7_6 +4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) tomcat-7.0.76-10.el7_6, tomcat-admin-webapps-7.0.76-10.el7_6, tomcat-docs-webapp-7.0.76-10.el7_6 +6