Re: Tomcat jdbc connections

2022-01-26 Thread Phil Steitz
On 1/25/22 1:44 AM, Alan F wrote: Hi Chris, Thankyou so much for your time and detail here. I had been working on this yesterday and posted my findings below. In the end It turned out to be my lack of understanding on Tomcat, but hey we are always learning! I would just like to update on

[SECURITY] CVE-2022-23181 Apache Tomcat Local Privilege Escalation

2022-01-26 Thread Mark Thomas
CVE-2022-23181 Apache Tomcat Local Privilege Escalation Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.0-M8 Apache Tomcat 10.0.0-M5 to 10.0.14 Apache Tomcat 9.0.35 to 9.0.56 Apache Tomcat 8.5.55 to 8.5.73 Description: The fix for bug CVE

JNDI bind in embedded Tomcat for "java:app"

2022-01-26 Thread Thomas Rohde
Hello Tomcat users! I'm using an embedded Tomcat (9.0.54) with Spring Boot. I have to execute some legacy code of an Java EE application which uses local EJBs an makes JNDI look for "java:app/foo/bar". Now I want to create an instance as Spring Bean an register it in the JNDI context. But Tomca

Re: Jax-RS problem with Tomcat 10

2022-01-26 Thread Mark Thomas
On 23/01/2022 08:13, Julien Bréda wrote: Hello, I've been trying for days to run a Jax-RS application in the following environment : - Tomcat 10.0.16 - Windows 11 - Eclipse 2021-12 and I finally found something weird. I tried with two different implementations (RESTeasy and Jersey) and I get