Moderate: Red Hat Security Advisory: tomcat6 security update

🗓️ 19 Feb 2013 20:29:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 40 Views

Security update for Apache Tomcat6 with CSRF, DoS, and authentication vulnerabilitie

Reporter	Title	Published	Views	Family All 270
FreeBSD	tomcat -- denial of service	4 Dec 201200:00	–	freebsd
FreeBSD	tomcat -- Denial of Service	5 Nov 201200:00	–	freebsd
FreeBSD	tomcat -- bypass of CSRF prevention filter	4 Dec 201200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Rational Collaborative Lifecycle Management 4.0.1 (CVE-2012-5885, CVE-2012-5886, CVE-2012-5887)	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Log4j Vulnerabilities Affect IBM Sterling B2B Integrator	6 Oct 202114:56	–	ibm
Tenable Nessus	Apache Tomcat 7.0.x < 7.0.28 Multiple DoS	26 Nov 201200:00	–	nessus
Tenable Nessus	Apache Tomcat 7.0.x < 7.0.32 CSRF Filter Bypass	17 Dec 201200:00	–	nessus
Tenable Nessus	Apache Tomcat 6.0.x < 6.0.36 Multiple Vulnerabilities	26 Nov 201200:00	–	nessus
Tenable Nessus	Apache Tomcat 7.0.x < 7.0.30 DIGEST Authentication Multiple Security Weaknesses	26 Nov 201200:00	–	nessus

Source	Link
tomcat	www.tomcat.apache.org/security-6.html
access	www.access.redhat.com/jbossnetwork/restricted/listSoftware.html
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

28 Jan 2026 22:54Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25

EPSS0.2277

apache tomcat6 security update csrf dos authentication vulnerabilities