Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 16.04 LTS: USN-4251-1 Critical: Tomcat Credential Issues

ubuntu
Calendar Grey January 27, 2020
Dist Ubuntu Esm H88
=========================================================================Ubuntu Security Notice USN-
Several security issues were fixed in Tomcat.

Summary

Several security issues were fixed in Tomcat.

Software Description:

- tomcat8: Servlet and JSP engine

Details:

It was discovered that Tomcat incorrectly handled the RMI registry when

configured with the JMX Remote Lifecycle Listener. A local attacker could

possibly use this issue to obtain credentials and gain complete control

over the Tomcat instance. (CVE-2019-12418)

It was discovered that Tomcat incorrectly handled FORM authentication. A

remote attacker could possibly use this issue to perform a session fixation

attack. (CVE-2019-17563)

Topics%20covered

Topics Covered

security advisory tomcat ubuntu session fixation credentials issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libtomcat8-java                 8.0.32-1ubuntu1.11
  tomcat8                         8.0.32-1ubuntu1.11

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4251-1

CVE-2019-12418, CVE-2019-17563

Severity
critical
Lowest
Low
Medium
High
Critical

January 27, 2020

Topics%20covered

Topics Covered

security advisory tomcat ubuntu session fixation credentials issue

Package Information

https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.11

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here