Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3987-1

Опубликовано: 05 окт. 2023
Источник: suse-cvrf

Описание

Security update for tomcat

This update for tomcat fixes the following issues:

  • CVE-2023-41080: Fixed URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature (bsc#1214666).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
tomcat-9.0.36-3.108.1
tomcat-admin-webapps-9.0.36-3.108.1
tomcat-docs-webapp-9.0.36-3.108.1
tomcat-el-3_0-api-9.0.36-3.108.1
tomcat-javadoc-9.0.36-3.108.1
tomcat-jsp-2_3-api-9.0.36-3.108.1
tomcat-lib-9.0.36-3.108.1
tomcat-servlet-4_0-api-9.0.36-3.108.1
tomcat-webapps-9.0.36-3.108.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
tomcat-9.0.36-3.108.1
tomcat-admin-webapps-9.0.36-3.108.1
tomcat-docs-webapp-9.0.36-3.108.1
tomcat-el-3_0-api-9.0.36-3.108.1
tomcat-javadoc-9.0.36-3.108.1
tomcat-jsp-2_3-api-9.0.36-3.108.1
tomcat-lib-9.0.36-3.108.1
tomcat-servlet-4_0-api-9.0.36-3.108.1
tomcat-webapps-9.0.36-3.108.1

Ссылки

Описание

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.36-3.108.1
SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.36-3.108.1
SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.36-3.108.1
SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.36-3.108.1
Ссылки