| Revision Date: | 2020-01-07 | Version: | 1 |
| Title: | Security update for tomcat (Important) |
| Description: |
This update for tomcat to version 9.0.30 fixes the following issues:
Security issue fixed:
- CVE-2019-12418: Fixed a local privilege escalation through by manipulating the RMI registry and performing a man-in-the-middle attack (bsc#1159723). - CVE-2019-17563: Fixed a session fixation attack when using FORM authentication (bsc#1159729).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1139924
1159723
1159729
CVE-2019-10072
CVE-2019-12418
CVE-2019-17563
SUSE-SU-2020:0029-1
|
| Platform(s): | SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information
tomcat-9.0.30-4.10.1 is installed
OR tomcat-admin-webapps-9.0.30-4.10.1 is installed
OR tomcat-el-3_0-api-9.0.30-4.10.1 is installed
OR tomcat-jsp-2_3-api-9.0.30-4.10.1 is installed
OR tomcat-lib-9.0.30-4.10.1 is installed
OR tomcat-servlet-4_0-api-9.0.30-4.10.1 is installed
OR tomcat-webapps-9.0.30-4.10.1 is installed
|