Skip to content
OpenAdvisories
Unscored RHSA-2016:0492 1 CVE

Red Hat Security Advisory: tomcat6 security and bug fix update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-admin-webapps 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-debuginfo 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-docs-webapp 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-el-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-javadoc 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-jsp-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-lib 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-servlet-2.5-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client tomcat6-webapps 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-admin-webapps 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-debuginfo 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-docs-webapp 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-el-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-javadoc 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-jsp-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-lib 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-servlet-2.5-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode tomcat6-webapps 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-admin-webapps 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-debuginfo 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-docs-webapp 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-el-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-javadoc 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-jsp-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-lib 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-servlet-2.5-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server tomcat6-webapps 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-admin-webapps 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-debuginfo 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-docs-webapp 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-el-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-javadoc 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-jsp-2.1-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-lib 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-servlet-2.5-api 0:6.0.24-94.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation tomcat6-webapps 0:6.0.24-94.el6_7

Vulnerabilities 1

  • Medium —
    CVE-2014-7810 EPSS 13%

    Improper Access Control in Apache Tomcat

    The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypa…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1301646
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0492.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-7810
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7810
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7810
  • article
    http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44
  • article
    http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.59
  • article
    http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.17