RHSA-2024:0474MediumCVSS 6.1
Red Hat Security Advisory: tomcat security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2023-41080 — tomcat: Open Redirect vulnerability in FORM authentication CVE-2023-42794 — tomcat: FileUpload: DoS due to accumulation of temporary files on Windows CVE-2023-42795 — tomcat: improper cleaning of recycled objects could lead to information leak CVE-2023-45648 — tomcat: incorrectly parsed http trailer headers can cause request smuggling
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2024:0474
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2235370
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2243749
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2243751
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2243752
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0474.json