Lucene search
GanandATLASSIAN:BSERV-3475HistoryMay 21, 2013 - 4:29 a.m.
Upgrade bundled Tomcat due to security vulnerabilities
2013-05-2104:29:40
ganand
jira.atlassian.com
56
EPSS
0.718
Percentile
98.1%
There are some Tomcat security vulnerabilities reported against the bundled version 7.0.32:
[CVE-2013-2067|http://mail-archives.apache.org/mod_mbox/www-announce/201305.mbox/<[email protected]>]
[CVE-2013-2071|http://mail-archives.apache.org/mod_mbox/tomcat-announce/201305.mbox/<[email protected]>]
[CVE-2012-3544|http://mail-archives.apache.org/mod_mbox/tomcat-announce/201305.mbox/<[email protected]>] - Not reported for Tomcat 7.0.32
Stash should be bundled with the latest Tomcat version 7.0.40 to ensure it contains a fix for the above security vulnerabilities.
Related
securityvulns
securityvulns
Apache Tomcat security vulnerabilities
2013-05-10 00:00:00
[SECURITY] CVE-2013-2067 Session fixation with FORM authenticator
2013-05-10 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : tomcat6, tomcat7 vulnerabilities (USN-1841-1)
2013-05-29 00:00:00
Oracle Secure Global Desktop Multiple Vulnerabilities (January 2014 CPU)
2014-02-05 00:00:00
Apache Tomcat 6.0.x < 6.0.37 Multiple Vulnerabilities
2013-05-15 00:00:00
openvas
openvas
Ubuntu Update for tomcat7 USN-1841-1
2013-05-31 00:00:00
Ubuntu: Security Advisory (USN-1841-1)
2013-05-31 00:00:00
Apache Tomcat 6.0.x < 6.0.37 Multiple Vulnerabilities - Linux
2021-10-29 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2013-05-28 00:00:00
atlassian
atlassian
Upgrade bundled Tomcat due to security vulnerabilities
2013-05-21 04:29:40
Upgrade bundled Tomcat to 6.0.37
2013-05-21 00:23:31
Upgrade bundled Tomcat to 6.0.37
2013-05-21 00:23:31
tomcat
tomcat
Fixed in Apache Tomcat 6.0.37
2013-05-03 00:00:00
Fixed in Apache Tomcat 7.0.33
2012-11-21 00:00:00
Fixed in Apache Tomcat 7.0.40
2013-05-09 00:00:00
redhat
redhat
(RHSA-2013:1011) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 00:00:00
(RHSA-2013:1012) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 15:40:17
(RHSA-2013:0964) Moderate: tomcat6 security update
2013-06-20 00:00:00
osv
osv
tomcat7 - security update
2014-04-08 00:00:00
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-17 02:44:28
Improper Authentication in Apache Tomcat
2022-05-14 01:10:35
mageia
mageia
Updated tomcat6 packages fix multiple vulnerabilities and logging
2014-02-17 22:13:24
Updated tomcat7 packages fix CVE-2013-2071
2013-07-01 23:08:10
veracode
veracode
Session Fixation During Completion Of The Login Form
2019-01-15 08:55:05
debian
debian
[SECURITY] [DSA 2897-1] tomcat7 security update
2014-04-08 18:25:14
[SECURITY] [DSA 2725-1] tomcat6 security update
2013-07-18 17:58:50
prion
prion
Cross site request forgery (csrf)
2013-06-01 14:21:00
Session fixation
2013-06-01 14:21:00
Code injection
2013-06-01 14:21:00
seebug
seebug
Apache Tomcat 信息泄露漏洞(CVE-2013-2071)
2013-05-17 00:00:00
Apache Tomcat表单验证功能安全绕过漏洞
2013-06-06 00:00:00
Apache Tomcat 不完整修复拒绝服务漏洞
2014-02-27 00:00:00
ubuntucve
ubuntucve
github
github
Improper Authentication in Apache Tomcat
2022-05-14 01:10:35
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-17 02:44:28
Apache Tomcat Denial of Service vulnerability
2022-05-14 01:10:35
cve
cve
fedora
fedora
[SECURITY] Fedora 18 Update: tomcat-7.0.40-1.fc18
2013-05-21 08:45:56
[SECURITY] Fedora 17 Update: tomcat-7.0.40-1.fc17
2013-05-21 08:28:12
[SECURITY] Fedora 19 Update: tomcat-7.0.40-2.fc19
2013-05-24 20:43:43
debiancve
debiancve
nvd
nvd
cvelist
cvelist
oraclelinux
oraclelinux
tomcat6 security update
2013-06-20 00:00:00
amazon
amazon
Low: tomcat7
2013-05-24 13:55:00
Medium: tomcat6
2014-05-21 10:45:00
centos
centos
tomcat6 security update
2013-06-20 17:46:38
tomcat6 security update
2014-04-23 19:07:14
checkpoint_advisories
checkpoint_advisories
Apache Tomcat Chunked Transfer Denial of Service - Ver 2 (CVE-2012-3544)
2013-11-10 00:00:00
f5
f5
K20038622 : Multiple Apache Tomcat vulnerabilities
2020-08-06 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2014-12-15 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00