Lucene search
RedHatRHSA-2020:2367HistoryJun 04, 2020 - 1:07 p.m.
(RHSA-2020:2367) Important: Red Hat support for Spring Boot 2.1.13 security and bug fix update
2020-06-0413:07:46
access.redhat.com
110
0.974 High
EPSS
Percentile
99.9%
Red Hat support for Spring Boot provides an application platform that reduces the complexity of developing and operating applications (monoliths and microservices) for OpenShift as a containerized platform.
This release of Red Hat support for Spring Boot 2.1.13 serves as a replacement for Red Hat support for Spring Boot 2.1.12, and includes security and bug fixes and enhancements. For further information, refer to the release notes linked to in the References section.
Security Fix(es):
-
undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS (CVE-2019-14888)
-
undertow: AJP File Read/Inclusion Vulnerability (CVE-2020-1745)
-
tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability (CVE-2020-1938)
-
tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling (CVE-2020-1935)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
redhatcve
redhatcve
osv
osv
CVE-2020-1745
2020-04-28 15:15:13
Improper Authorization in Undertoe
2022-05-24 17:16:46
tomcat8 - security update
2020-05-03 00:00:00
openvas
openvas
Apache Tomcat Multiple Vulnerabilities (Feb 2020) - Windows
2020-02-25 00:00:00
Apache Tomcat Multiple Vulnerabilities (Feb 2020) - Linux
2020-02-25 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2020-1302)
2020-03-23 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2020-1302)
2020-03-23 00:00:00
Amazon Linux AMI : tomcat8 (ALAS-2020-1353)
2020-03-16 00:00:00
openSUSE Security Update : tomcat (openSUSE-2020-345)
2020-03-16 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2020-0285
2020-03-09 00:00:00
Critical Photon OS Security Update - PHSA-2020-0218
2020-03-09 00:00:00
ibm
ibm
amazon
amazon
Important: tomcat7
2020-03-09 19:20:00
Important: tomcat8
2020-03-09 19:21:00
Medium: tomcat
2023-08-17 11:58:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.31
2020-02-11 00:00:00
Fixed in Apache Tomcat 8.5.51
2020-02-11 00:00:00
Fixed in Apache Tomcat 7.0.100
2020-02-14 00:00:00
debian
debian
[SECURITY] [DSA 4673-1] tomcat8 security update
2020-05-03 18:29:38
[SECURITY] [DLA 2133-1] tomcat7 security update
2020-03-04 18:14:50
[SECURITY] [DLA 2209-1] tomcat8 security update
2020-05-28 17:53:49
kaspersky
kaspersky
KLA11679 Multiple vulnerabilities in Apache Tomcat
2020-02-24 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2020-03-10 22:04:50
thn
thn
GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat
2020-02-28 13:00:00
suse
suse
Security update for tomcat (important)
2020-03-15 00:00:00
cve
cve
github
github
Undertow vulnerable to Uncontrolled Resource Consumption
2022-05-24 17:07:10
Improper Authorization in Undertoe
2022-05-24 17:16:46
Potential HTTP request smuggling in Apache Tomcat
2020-02-28 01:10:48
debiancve
debiancve
ubuntucve
ubuntucve
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2020-01-24 00:24:58
Directory Traversal
2020-03-13 00:44:21
HTTP Request Smuggling
2020-02-25 05:38:50
prion
prion
Design/Logic Flaw
2020-01-23 17:15:00
Remote code execution
2020-04-28 15:15:00
Design/Logic Flaw
2020-02-24 22:15:00
nvd
nvd
redhat
redhat
(RHSA-2020:0813) Critical: Red Hat JBoss Enterprise Application Platform 7.2 security update
2020-03-12 17:07:42
(RHSA-2020:0812) Critical: Red Hat JBoss Enterprise Application Platform 7.2 security update
2020-03-12 17:01:06
(RHSA-2020:0952) Critical: Red Hat Single Sign-On 7.3.7 security update
2020-03-23 20:11:36
f5
f5
K43709560 : Apache Tomcat vulnerability CVE-2020-1935
2020-03-06 00:00:00
K53254186 : Apache Tomcat vulnerability CVE-2020-1938
2020-03-04 00:00:00
K73059510 : Undertow vulnerabilities CVE-2019-10212 and CVE-2020-1745
2020-05-12 00:00:00
oraclelinux
oraclelinux
tomcat security update
2020-11-12 00:00:00
tomcat security update
2020-03-22 00:00:00
tomcat6 security update
2020-03-23 00:00:00
cgr
cgr
CVE-2020-1935 vulnerabilities
2024-05-19 03:07:16
CVE-2020-1938 vulnerabilities
2024-05-19 03:07:16
atlassian
atlassian
Upgrade Tomcat to version 8.5.75 - CVE-2020-9484/CVE-2022-23181
2022-01-27 13:24:58
Upgrade Tomcat to 8.5.50 to fix CVE-2019-17563 & CVE-2019-12418
2020-01-15 15:29:54
Upgrade Tomcat to 8.5.50 to fix CVE-2019-17563 & CVE-2019-12418
2020-01-15 15:29:54
centos
centos
tomcat security update
2020-11-18 17:27:18
tomcat6 security update
2020-03-25 19:21:34
tomcat security update
2020-03-25 19:05:03
fedora
fedora
[SECURITY] Fedora 32 Update: tomcat-9.0.31-2.fc32
2020-03-31 00:18:31
[SECURITY] Fedora 30 Update: tomcat-9.0.31-2.fc30
2020-04-02 09:19:40
[SECURITY] Fedora 31 Update: tomcat-9.0.31-2.fc31
2020-04-02 09:56:06
threatpost
threatpost
Wordpress Yellow Pencil Plugin Flaws Actively Exploited
2019-04-12 14:13:06
Apache Tomcat Exploit Poised to Pounce, Stealing Files
2020-03-23 20:56:37
Weather Channel Knocked Off-Air in Dangerous Precedent
2019-04-18 20:21:21
myhack58
myhack58
githubexploit
githubexploit
Exploit for CVE-2020-1938
2021-08-14 17:32:51
Exploit for Improper Privilege Management in Apache Tomcat
2021-04-27 14:57:30
Exploit for Improper Privilege Management in Apache Tomcat
2020-11-14 13:55:58
qualysblog
qualysblog
rapid7blog
rapid7blog
Metasploit Wrap-Up
2020-12-04 19:27:53
huawei
huawei
Security Advisory - Apache Tomcat File Inclusion Vulnerability
2020-07-15 00:00:00
cisa_kev
cisa_kev
Apache Tomcat Improper Privilege Management Vulnerability
2022-03-03 00:00:00