Lucene search
Michael.gembalskiATLASSIAN:JRASERVER-67695HistoryAug 01, 2018 - 9:33 a.m.
Upgrade to Tomcat 8.5.32 necessary
2018-08-0109:33:53
michael.gembalski
jira.atlassian.com
583
0.791 High
EPSS
Percentile
98.3%
There are new vulnerabilities reported by apache:
- [http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/<20180722090435.GA60759%40minotaur.apache.org>]
- [http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/<20180722090623.GA92700%40minotaur.apache.org>]
It is recommended to update tomcat at least to version 8.5.32.
Workaround
Update Tomcat to 8.5.32 following this guide: [https://confluence.atlassian.com/jirakb/how-to-upgrade-apache-tomcat-version-in-jira-7-x-879957866.html]
Add relaxedChars property to your server.xml as in here [https://confluence.atlassian.com/display/JIRAKB/Changing+server.xml+to+handle+requests+with+special+characters]
Related
nessus
nessus
RHEL 6 / 7 : Red Hat JBoss Web Server 5.0 Service Pack 1 (RHSA-2018:2868)
2018-10-04 00:00:00
RHEL 8 : pki-deps:10.6 (RHSA-2019:1529)
2019-06-19 00:00:00
CentOS 8 : pki-deps:10.6 (CESA-2019:1529)
2021-01-29 00:00:00
redhat
redhat
(RHSA-2018:2868) Important: Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update
2018-10-03 13:41:48
(RHSA-2018:2867) Important: Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update
2018-10-03 13:41:44
(RHSA-2019:1529) Important: pki-deps:10.6 security update
2019-06-18 16:36:21
openvas
openvas
Fedora Update for tomcat FEDORA-2018-b18f9dd65b
2019-04-03 00:00:00
openSUSE: Security Advisory for tomcat (openSUSE-SU-2018:2740-1)
2018-09-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2699-1)
2021-04-19 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: tomcat-8.5.35-1.fc28
2019-04-03 02:02:31
[SECURITY] Fedora 29 Update: tomcat-9.0.13-1.fc29
2019-02-13 02:48:13
cisa
cisa
Apache Releases Security Updates for Apache Tomcat
2018-07-23 00:00:00
Apache Releases Security Updates for Apache Tomcat
2018-10-04 00:00:00
thn
thn
Apache Tomcat Patches Important Security Vulnerabilities
2018-07-24 11:36:00
almalinux
almalinux
Important: pki-deps:10.6 security update
2019-06-18 16:36:21
osv
osv
Important: pki-deps:10.6 security update
2019-06-18 16:36:21
Important: pki-deps:10.6 security update
2019-06-18 16:36:21
CVE-2018-11784
2018-10-04 13:29:00
rocky
rocky
pki-deps:10.6 security update
2019-06-18 16:36:21
oraclelinux
oraclelinux
pki-deps:10.6 security update
2019-07-30 00:00:00
tomcat security update
2019-03-13 00:00:00
tomcat security update
2018-10-16 00:00:00
suse
suse
Security update for tomcat (moderate)
2018-09-17 12:12:40
Security update for tomcat (moderate)
2018-10-06 18:10:05
Security update for tomcat (moderate)
2018-10-25 18:22:29
amazon
amazon
Important: tomcat8
2018-08-09 16:12:00
Medium: tomcat
2019-04-04 22:00:00
Medium: tomcat7
2018-11-05 19:35:00
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2018-12-10 00:20:39
ubuntucve
ubuntucve
nvd
nvd
ibm
ibm
debian
debian
[SECURITY] [DLA 1545-1] tomcat8 security update
2018-10-15 16:56:28
[SECURITY] [DSA 4281-1] tomcat8 security update
2018-08-29 06:29:28
[SECURITY] [DSA 4281-1] tomcat8 security update
2018-08-29 06:29:28
kaspersky
kaspersky
KLA11327 SB vulnerability in Apache Tomcat
2018-10-03 00:00:00
KLA11597 DoS vulnerability in Apache Tomcat
2018-05-03 00:00:00
prion
prion
Race condition
2018-08-02 14:29:00
Design/Logic Flaw
2018-10-04 13:29:00
Design/Logic Flaw
2018-08-02 14:29:00
cvelist
cvelist
debiancve
debiancve
centos
centos
tomcat security update
2019-03-19 14:33:17
tomcat security update
2018-10-16 16:57:41
checkpoint_advisories
checkpoint_advisories
Apache Tomcat Default Servlet Open Redirect (CVE-2018-11784)
2019-02-19 00:00:00
github
github
Apache Tomcat Open Redirect vulnerability
2018-10-17 16:31:02
Apache Tomcat Race Condition vulnerability
2018-10-17 16:33:02
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
2018-10-17 16:32:18
f5
f5
K64921482 : Apache Tomcat vulnerability CVE-2018-11784
2018-10-25 00:00:00
K98776835 : Apache Tomcat vulnerability - CVE-2018-8037
2018-09-05 00:00:00
K73008537 : Apache Tomcat vulnerability CVE-2018-1336
2018-09-10 00:00:00
redhatcve
redhatcve
nuclei
nuclei
Apache Tomcat - Open Redirect
2021-03-18 16:22:01
cve
cve
veracode
veracode
Open Redirection
2019-01-15 09:25:50
Open Redirection
2018-10-04 09:06:12
Information Disclosure
2018-07-23 06:35:16
packetstorm
packetstorm
Apache Tomcat 9.0.0M1 Open Redirect
2021-07-11 00:00:00
zdt
zdt
Apache Tomcat 9.0.0.M1 - Open Redirect Vulnerability
2021-07-13 00:00:00
symantec
symantec
Apache Tomcat CVE-2018-8037 Information Disclosure Vulnerability
2018-07-22 00:00:00
Apache Tomcat CVE-2018-11784 Open Redirection Vulnerability
2018-10-03 00:00:00
ubuntu
ubuntu
Tomcat vulnerability
2018-10-10 00:00:00
Apache Tomcat 7 vulnerabilities
2021-03-15 00:00:00
Tomcat vulnerabilities
2018-07-25 00:00:00
atlassian
atlassian
Update Tomcat to 8.5.34 to avoid CVE-2018-11784
2018-10-10 09:22:17
Update Tomcat to 8.5.34 to avoid CVE-2018-11784
2018-10-10 09:22:17
tomcat
tomcat
Fixed in Apache Tomcat 8.5.34
2018-09-10 00:00:00
Fixed in Apache Tomcat 9.0.12
2018-09-10 00:00:00
Fixed in Apache Tomcat 7.0.91
2018-09-19 00:00:00
photon
photon
exploitdb
exploitdb
Apache Tomcat 9.0.0.M1 - Open Redirect
2021-07-13 00:00:00