Re: Asking Apache Tomcat Vulnerabilities(CVE-2022-25762)

2022-05-24 Thread Mark Thomas
On 24/05/2022 02:56, 오현택 wrote: hello. I Ask for CVE-2022-25762 Vulnerabilities. In the described part, it seems that the vulnerability is determined depending on whether or not Websocket is used. Even if you are using an affected version of Tomcat, if you do not use Websockets, we ask if

Asking Apache Tomcat Vulnerabilities(CVE-2022-25762)

2022-05-23 Thread 오현택
hello. I Ask for CVE-2022-25762 Vulnerabilities. In the described part, it seems that the vulnerability is determined depending on whether or not Websocket is used. Even if you are using an affected version of Tomcat, if you do not use Websockets, we ask if you are not a target of the

Asking Apache Tomcat Vulnerabilities(CVE-2022-25762)

2022-05-23 Thread 오현택
hello. I Ask for CVE-2022-25762 Vulnerabilities. In the described part, it seems that the vulnerability is determined depending on whether or not Websocket is used. Even if you are using an affected version of Tomcat, if you do not use Websockets, we ask if you are not a target of the

RE: Apache Tomcat Vulnerabilities

2016-04-28 Thread Taylor, Larry
Thanks Andre If an upgrade we will bump up to Tomcat 9 if this is a stable release -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Thursday, April 28, 2016 1:24 PM To: users@tomcat.apache.org Subject: Re: Apache Tomcat Vulnerabilities On 28.04.2016 21:48

Re: Apache Tomcat Vulnerabilities

2016-04-28 Thread tomcat
On 28.04.2016 21:48, Taylor, Larry wrote: Hello, I am using Tomcat Version: apache-tomcat-7.0.50 That version dates back to 2014. The latest version in that branch is 7.0.69 See : http://tomcat.apache.org/download-70.cgi OS: Red Hat Enterprise Linux Server release 6.5 (Santiago) 64bit

re: Apache Tomcat Vulnerabilities

2016-04-28 Thread Taylor, Larry
Hello, I am using Tomcat Version: apache-tomcat-7.0.50 OS: Red Hat Enterprise Linux Server release 6.5 (Santiago) 64bit Issue: There were 2 vulnerabilities found and need to know if there are configurations or patches available to resolve these. 1. Tomcat was configured to use SSL