Security update for tomcat
This update for tomcat to version 9.0.30 fixes the following issues: Security issue fixed: - CVE-2019-12418: Fixed a local privilege escalation through by manipulating the RMI registry and performing a man-in-the-middle attack (bsc#1159723). - CVE-2019-17563: Fixed a session fixation attack when using FORM authentication (bsc#1159729). This update was imported from the SUSE:SLE-15-SP1:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for tomcat to version 9.0.30 fixes the following issues: Security issue fixed: - CVE-2019-12418: Fixed a local privilege escalation through by manipulating the RMI registry and performing a man-in-the-middle attack (bsc#1159723). - CVE-2019-17563: Fixed a session fixation attack when using FORM authentication (bsc#1159729). This update was imported from the SUSE:SLE-15-SP1:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1139924
- https://bugzilla.suse.com/1159723
- https://bugzilla.suse.com/1159729
- https://lists.opensuse.org/archives/list/[email protected]/thread/54BLO3OHVPO6A3AIEQHGLVDNHSXP5KDS/
- https://www.suse.com/security/cve/CVE-2019-10072
- https://www.suse.com/security/cve/CVE-2019-12418
- https://www.suse.com/security/cve/CVE-2019-17563