Re: Tomcat and Qualsys QID: 87413

2020-05-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 5/18/20 18:37, jonmcalexan...@wellsfargo.com.INVALID wrote: > -Original Message- From: Mark Thomas > Sent: Monday, May 18, 2020 5:29 PM To: users@tomcat.apache.org > Subject: Re: Tomcat and Qualsys QID: 87413 > > O

RE: Tomcat and Qualsys QID: 87413

2020-05-18 Thread jonmcalexander
-Original Message- From: Mark Thomas Sent: Monday, May 18, 2020 5:29 PM To: users@tomcat.apache.org Subject: Re: Tomcat and Qualsys QID: 87413 On 18/05/2020 21:45, jonmcalexan...@wellsfargo.com.INVALID wrote: > I hate bringing up old crap, but I just want to make sure I have everyth

Re: Tomcat and Qualsys QID: 87413

2020-05-18 Thread Mark Thomas
On 18/05/2020 21:45, jonmcalexan...@wellsfargo.com.INVALID wrote: > I hate bringing up old crap, but I just want to make sure I have everything > covered on my end. As far as this QID, the dreaded Ghost Cat, and AJP, is > there ANY special AJP configuration that should be done to make sure that

Tomcat and Qualsys QID: 87413

2020-05-18 Thread jonmcalexander
I hate bringing up old crap, but I just want to make sure I have everything covered on my end. As far as this QID, the dreaded Ghost Cat, and AJP, is there ANY special AJP configuration that should be done to make sure that this QID is mitigated for Tomcat 7.0.103, 8.5.53, and 9.0.33 and above