Back to bug 1390493

Who When What Removed Added
Martin Prpič 2016-11-01 09:14:48 UTC Fixed In Version tomcat 6.0.47, tomcat 7.0.72, tomcat 8.5.5, tomcat 8.0.37
Martin Prpič 2016-11-01 10:11:56 UTC CC alee, ivan.afonichev, java-sig-commits, krzysztof.daniel, me, trick
Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=affected,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=affected,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected
Martin Prpič 2016-11-01 10:21:35 UTC Depends On 1390531
Martin Prpič 2016-11-01 10:21:43 UTC Depends On 1390532
Martin Prpič 2016-11-01 10:21:56 UTC Depends On 1390533
Martin Prpič 2016-11-01 10:23:29 UTC Blocks 1390534
Yasuhiro Ozone 2016-11-01 22:50:39 UTC CC yozone
Hooman Broujerdi 2016-11-07 01:31:43 UTC CC hghasemb
Hung 2016-11-07 14:46:57 UTC CC hpham
Bharti Kundal 2016-11-08 21:03:01 UTC CC bkundal
Hooman Broujerdi 2016-11-09 02:26:14 UTC Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=affected,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected
Timothy Walsh 2016-11-09 05:18:18 UTC CC twalsh
Timothy Walsh 2016-11-09 06:15:42 UTC Depends On 1393216
Timothy Walsh 2016-11-09 06:15:55 UTC Depends On 1393217
Timothy Walsh 2017-01-17 05:24:04 UTC CC aileenc, alazarot, bbaranow, bmaxwell, ccoleman, cdewolf, chazlett, dandread, darran.lofthouse, dedgar, dmcphers, dosoudil, etirelli, felias, gvarsami, gzaronik, hchiorea, huwang, jawilson, jclere, jcoleman, jgoulding, joelsmith, jolee, jshepherd, kconner, kverlaen, ldimaggi, lgao, lpetrovi, mbabacek, mbaluch, mwinkler, myarboro, nwallace, pavelp, pgier, psakar, rnetuka, rrajasek, rwagner, rzhang, spinder, tcunning, theute, tkirby, vhalbert, vtunka, weli
Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected
Timothy Walsh 2017-01-17 05:27:18 UTC Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected
Timothy Walsh 2017-01-17 05:32:28 UTC Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected
Timothy Walsh 2017-01-17 05:56:18 UTC Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected,jws-3/tomcat7=affected
Timothy Walsh 2017-01-17 06:50:37 UTC Blocks 1376651
Timothy Walsh 2017-03-02 07:29:44 UTC Doc Text It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
Timothy Walsh 2017-03-02 11:22:38 UTC Blocks 1428325
Timothy Walsh 2017-04-26 05:15:08 UTC CC psotirop
Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected,jws-3/tomcat7=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected,jws-3/tomcat7=affected
Doran Moppert 2017-07-21 05:18:19 UTC Blocks 1415638
PnT Account Manager 2017-12-07 23:58:43 UTC CC felias
PnT Account Manager 2018-01-30 20:40:08 UTC CC hchiorea
PnT Account Manager 2018-05-10 18:18:34 UTC CC pavelp
Patrick van Staveren 2018-05-10 18:48:36 UTC CC trick
PnT Account Manager 2018-10-19 21:38:03 UTC CC bkundal
PnT Account Manager 2018-11-09 22:32:28 UTC CC hghasemb
Joshua Padman 2019-05-16 03:45:52 UTC Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected,jws-3/tomcat7=affected impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=wontfix,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=wontfix,jdv-6/jbossweb=wontfix,jon-3/jbossweb=wontfix,fsw-6/jbossweb=wontfix,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected,jws-3/tomcat7=affected
Lukáš Petrovický 2019-09-24 14:07:39 UTC CC lpetrovi
Product Security DevOps Team 2019-09-29 13:59:56 UTC Whiteboard impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=wontfix,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=wontfix,jdv-6/jbossweb=wontfix,jon-3/jbossweb=wontfix,fsw-6/jbossweb=wontfix,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat8=affected,jws-3/tomcat7=affected
PnT Account Manager 2019-11-05 01:07:10 UTC CC psakar
PnT Account Manager 2020-01-16 22:28:41 UTC CC hpham
PnT Account Manager 2020-10-16 22:25:10 UTC CC pgier
PnT Account Manager 2020-10-20 21:09:21 UTC CC vhalbert
Red Hat Bugzilla 2021-09-01 04:30:15 UTC CC spinder
Red Hat Bugzilla 2021-10-15 11:52:25 UTC CC kconner
Joshua Padman 2021-10-27 10:52:28 UTC Status NEW CLOSED
Resolution --- ERRATA
Last Closed 2021-10-27 10:52:28 UTC

Back to bug 1390493