ELSA-2024-0474 -- Oracle tomcat| ID: oval:org.secpod.oval:def:1507288 | Date: (C)2024-02-08 (M)2024-02-19 |
| Class: PATCH | Family: unix |
[1:9.0.62-37.el9_3.1] - Resolves: #2235370 CVE-2023-41080 tomcat: Open Redirect vulnerability in FORM authentication - Resolves: #2243749 CVE-2023-45648 tomcat: incorrectly parsed http trailer headers can cause request smuggling - Resolves: #2243751 CVE-2023-42794 tomcat: FileUpload: DoS due to accumulation of temporary files on Windows - Resolves: #2243752 CVE-2023-42795 tomcat: improper cleaning of recycled objects could lead to information leak
