rhsa-2014_0827
Vulnerability from csaf_redhat
Published
2014-07-02 08:44
Modified
2024-11-22 08:09
Summary
Red Hat Security Advisory: tomcat security update
Notes
Topic
Updated tomcat packages that fix three security issues are now available
for Red Hat Enterprise Linux 7.
The Red Hat Security Response Team has rated this update as having Moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.
It was discovered that Apache Tomcat did not limit the length of chunk
sizes when using chunked transfer encoding. A remote attacker could use
this flaw to perform a denial of service attack against Tomcat by streaming
an unlimited quantity of data, leading to excessive consumption of server
resources. (CVE-2014-0075)
It was found that Apache Tomcat did not check for overflowing values when
parsing request content length headers. A remote attacker could use this
flaw to perform an HTTP request smuggling attack on a Tomcat server located
behind a reverse proxy that processed the content length header correctly.
(CVE-2014-0099)
It was found that the org.apache.catalina.servlets.DefaultServlet
implementation in Apache Tomcat allowed the definition of XML External
Entities (XXEs) in provided XSLTs. A malicious application could use this
to circumvent intended security restrictions to disclose sensitive
information. (CVE-2014-0096)
The CVE-2014-0075 issue was discovered by David Jorm of Red Hat Product
Security.
All Tomcat 7 users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. Tomcat must be
restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated tomcat packages that fix three security issues are now available\nfor Red Hat Enterprise Linux 7.\n\nThe Red Hat Security Response Team has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that Apache Tomcat did not limit the length of chunk\nsizes when using chunked transfer encoding. A remote attacker could use\nthis flaw to perform a denial of service attack against Tomcat by streaming\nan unlimited quantity of data, leading to excessive consumption of server\nresources. (CVE-2014-0075)\n\nIt was found that Apache Tomcat did not check for overflowing values when\nparsing request content length headers. A remote attacker could use this\nflaw to perform an HTTP request smuggling attack on a Tomcat server located\nbehind a reverse proxy that processed the content length header correctly.\n(CVE-2014-0099)\n\nIt was found that the org.apache.catalina.servlets.DefaultServlet\nimplementation in Apache Tomcat allowed the definition of XML External\nEntities (XXEs) in provided XSLTs. A malicious application could use this\nto circumvent intended security restrictions to disclose sensitive\ninformation. (CVE-2014-0096)\n\nThe CVE-2014-0075 issue was discovered by David Jorm of Red Hat Product\nSecurity.\n\nAll Tomcat 7 users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. Tomcat must be\nrestarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:0827",
"url": "https://access.redhat.com/errata/RHSA-2014:0827"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-7.html",
"url": "http://tomcat.apache.org/security-7.html"
},
{
"category": "external",
"summary": "1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0827.json"
}
],
"title": "Red Hat Security Advisory: tomcat security update",
"tracking": {
"current_release_date": "2024-11-22T08:09:56+00:00",
"generator": {
"date": "2024-11-22T08:09:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2014:0827",
"initial_release_date": "2014-07-02T08:44:18+00:00",
"revision_history": [
{
"date": "2014-07-02T08:44:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-07-02T08:44:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:09:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsp-2.2-api@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-webapps@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-javadoc@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-admin-webapps@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-el-2.2-api@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-lib@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-jsvc@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-docs-webapp@7.0.42-6.el7_0?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"product": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"product_id": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-servlet-3.0-api@7.0.42-6.el7_0?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat-0:7.0.42-6.el7_0.src",
"product": {
"name": "tomcat-0:7.0.42-6.el7_0.src",
"product_id": "tomcat-0:7.0.42-6.el7_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat@7.0.42-6.el7_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src"
},
"product_reference": "tomcat-0:7.0.42-6.el7_0.src",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-lib-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-lib-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-webapps-0:7.0.42-6.el7_0.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
},
"product_reference": "tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"David Jorm"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-0075",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-02-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1072776"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0075"
},
{
"category": "external",
"summary": "RHBZ#1072776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-02T08:44:18+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
"product_ids": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0827"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter"
},
{
"cve": "CVE-2014-0096",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088342"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0096"
},
{
"category": "external",
"summary": "RHBZ#1088342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-02T08:44:18+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
"product_ids": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0827"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs"
},
{
"cve": "CVE-2014-0099",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102030"
}
],
"notes": [
{
"category": "description",
"text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: Request smuggling via malicious content length header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0099"
},
{
"category": "external",
"summary": "RHBZ#1102030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-02T08:44:18+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
"product_ids": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0827"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Client-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Client-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7ComputeNode-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7ComputeNode-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Server-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Server-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-0:7.0.42-6.el7_0.src",
"7Workstation-optional-7.0.Z:tomcat-admin-webapps-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-docs-webapp-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-el-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-javadoc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-jsvc-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-lib-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0.noarch",
"7Workstation-optional-7.0.Z:tomcat-webapps-0:7.0.42-6.el7_0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: Request smuggling via malicious content length header"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.