RHSA-2026:39188
Vulnerability from csaf_redhat - Published: 2026-07-14 18:04 - Updated: 2026-09-14 05:08Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.0 security release
Severity
Important
Notes
Topic: Red Hat JBoss Web Server 7.0 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 7.0.0 serves as a replacement for Red Hat JBoss Web Server 6.2.3. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section.
Security fix(es):
* tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486)
* tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146)
* tomcat-coyote: tomcat: Improper Authorization allows security bypass (CVE-2026-43515)
* tomcat-catalina: Apache Tomcat: Denial of Service due to uncontrolled resource allocation (CVE-2026-41284)
* tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293)
* tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498)
* tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication (CVE-2026-43512)
* tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)
* tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy (CVE-2026-43514)
* tomcat-catalina: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass (CVE-2026-55956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Apache Tomcat. This Padding Oracle vulnerability, present in the EncryptInterceptor with its default configuration, could allow a remote attacker to decrypt sensitive information. By exploiting weaknesses in the encryption padding, an attacker may be able to gain unauthorized access to data that should remain confidential.
7.5 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src | — |
Workaround
|
|
| Unresolved product id: 10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src | — |
Workaround
|
|
| Unresolved product id: 8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src | — |
Workaround
|
|
| Unresolved product id: 9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Tomcat. This vulnerability, categorized as Missing Encryption of Sensitive Data, arises from a bypass in the EncryptInterceptor, a component designed to ensure data encryption. This bypass, introduced as a fix for CVE-2026-29146, allows sensitive data to remain unencrypted, potentially leading to information disclosure.
7.5 (High)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service (DoS), making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Important
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid.
7.3 (High)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Moderate
A flaw was found in Apache Tomcat. During WebSocket authentication, the HTTP Authentication Header can be exposed to unexpected hosts. This vulnerability leads to information disclosure, potentially allowing an attacker to gain access to sensitive authentication credentials.
6.5 (Medium)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Moderate
A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls.
6.5 (Medium)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Moderate
In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks.
5.3 (Medium)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Moderate
A flaw was found in Apache Tomcat. The AJP secret was comparable in non-constant time, allowing an attacker on the local network to mount a timing attack to determine the AJP secret, which may lead to unauthorized access or other security bypasses.
CWE-208 - Observable Timing DiscrepancyAffected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Low
In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application.
5.4 (Medium)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Moderate
A flaw was found in Apache Tomcat where access control rules for the default servlet are improperly handled. An attacker can exploit this issue to bypass specific HTTP method restrictions, potentially gaining unauthorized access to protected application resources.
6.5 (Medium)
Affected products
Fixed
33 products, the same list as for
CVE-2026-29146
Known not affected
57 products, the same list as for
CVE-2026-29146
Threats
Impact
Moderate
References
65 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Web Server 7.0 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 7.0.0 serves as a replacement for Red Hat JBoss Web Server 6.2.3. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section.\n\nSecurity fix(es):\n\n* tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486)\n* tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146)\n* tomcat-coyote: tomcat: Improper Authorization allows security bypass (CVE-2026-43515)\n* tomcat-catalina: Apache Tomcat: Denial of Service due to uncontrolled resource allocation (CVE-2026-41284)\n* tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293)\n* tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498)\n* tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication (CVE-2026-43512)\n* tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)\n* tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy (CVE-2026-43514)\n* tomcat-catalina: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass (CVE-2026-55956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:39188",
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/7.0/html/red_hat_jboss_web_server_7.0_release_notes/index",
"url": "https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/7.0/html/red_hat_jboss_web_server_7.0_release_notes/index"
},
{
"category": "external",
"summary": "2457020",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457020"
},
{
"category": "external",
"summary": "2457027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457027"
},
{
"category": "external",
"summary": "2476511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476511"
},
{
"category": "external",
"summary": "2476512",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476512"
},
{
"category": "external",
"summary": "2476513",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476513"
},
{
"category": "external",
"summary": "2476516",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476516"
},
{
"category": "external",
"summary": "2476518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476518"
},
{
"category": "external",
"summary": "2476519",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476519"
},
{
"category": "external",
"summary": "2476520",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476520"
},
{
"category": "external",
"summary": "2494676",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494676"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39188.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.0 security release",
"tracking": {
"current_release_date": "2026-09-14T05:08:02+00:00",
"generator": {
"date": "2026-09-14T05:08:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:39188",
"initial_release_date": "2026-07-14T18:04:24+00:00",
"revision_history": [
{
"date": "2026-07-14T18:04:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-14T18:04:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-14T05:08:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Server 7.0 on RHEL 10",
"product": {
"name": "Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:7.0::el10"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Server 7.0 on RHEL 8",
"product": {
"name": "Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:7.0::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Server 7.0 on RHEL 9",
"product": {
"name": "Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:7.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Server"
},
{
"branches": [
{
"category": "product_version",
"name": "jws7-build-0:1-1.el10jws.x86_64",
"product": {
"name": "jws7-build-0:1-1.el10jws.x86_64",
"product_id": "jws7-build-0:1-1.el10jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-build@1-1.el10jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-runtime-0:1-1.el10jws.x86_64",
"product": {
"name": "jws7-runtime-0:1-1.el10jws.x86_64",
"product_id": "jws7-runtime-0:1-1.el10jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-runtime@1-1.el10jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"product": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"product_id": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native@1.3.7-2.redhat_2.el10jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"product": {
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"product_id": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native-debuginfo@1.3.7-2.redhat_2.el10jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-build-0:1-1.el8jws.x86_64",
"product": {
"name": "jws7-build-0:1-1.el8jws.x86_64",
"product_id": "jws7-build-0:1-1.el8jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-build@1-1.el8jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-runtime-0:1-1.el8jws.x86_64",
"product": {
"name": "jws7-runtime-0:1-1.el8jws.x86_64",
"product_id": "jws7-runtime-0:1-1.el8jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-runtime@1-1.el8jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"product": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"product_id": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native@1.3.7-2.redhat_2.el8jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"product": {
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"product_id": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native-debuginfo@1.3.7-2.redhat_2.el8jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-build-0:1-1.el9jws.x86_64",
"product": {
"name": "jws7-build-0:1-1.el9jws.x86_64",
"product_id": "jws7-build-0:1-1.el9jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-build@1-1.el9jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-runtime-0:1-1.el9jws.x86_64",
"product": {
"name": "jws7-runtime-0:1-1.el9jws.x86_64",
"product_id": "jws7-runtime-0:1-1.el9jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-runtime@1-1.el9jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"product": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"product_id": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native@1.3.7-2.redhat_2.el9jws?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"product": {
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"product_id": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native-debuginfo@1.3.7-2.redhat_2.el9jws?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"product": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"product_id": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-jboss-logging@3.6.2-1.Final_redhat_00001.1.el10jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"product": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"product_id": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-ecj@4.38.0-1.redhat_00001.1.el10jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"product": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"product_id": "jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-tools@6.0.0-1.el10jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"product": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"product_id": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster@2.1.0-1.Final_redhat_00001.1.el10jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"product": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"product_id": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native@1.3.7-2.redhat_2.el10jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"product": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"product_id": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault@1.1.11-4.Final_redhat_00003.1.el10jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"product": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"product_id": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat@11.0.21-5.redhat_00004.1.el10jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"product": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"product_id": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-jboss-logging@3.6.2-1.Final_redhat_00001.1.el8jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"product": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"product_id": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-ecj@4.38.0-1.redhat_00001.1.el8jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"product": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"product_id": "jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-tools@6.0.0-1.el8jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"product": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"product_id": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster@2.1.0-1.Final_redhat_00001.1.el8jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"product": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"product_id": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native@1.3.7-2.redhat_2.el8jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"product": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"product_id": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault@1.1.11-4.Final_redhat_00003.1.el8jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"product": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"product_id": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat@11.0.21-5.redhat_00004.1.el8jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"product": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"product_id": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-jboss-logging@3.6.2-1.Final_redhat_00001.1.el9jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"product": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"product_id": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-ecj@4.38.0-1.redhat_00001.1.el9jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"product": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"product_id": "jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-tools@6.0.0-1.el9jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"product": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"product_id": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster@2.1.0-1.Final_redhat_00001.1.el9jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"product": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"product_id": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-native@1.3.7-2.redhat_2.el9jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"product": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"product_id": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault@1.1.11-4.Final_redhat_00003.1.el9jws?arch=src"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"product": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"product_id": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat@11.0.21-5.redhat_00004.1.el9jws?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"product": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"product_id": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-jboss-logging@3.6.2-1.Final_redhat_00001.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"product": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"product_id": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-ecj@4.38.0-1.redhat_00001.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"product": {
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"product_id": "jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-filesystem@6.0.0-1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"product": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"product_id": "jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-tools@6.0.0-1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"product": {
"name": "jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"product_id": "jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-python3-javapackages@6.0.0-1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"product": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"product_id": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster@2.1.0-1.Final_redhat_00001.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"product": {
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"product_id": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster-tomcat@2.1.0-1.Final_redhat_00001.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"product_id": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault@1.1.11-4.Final_redhat_00003.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"product_id": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault-javadoc@1.1.11-4.Final_redhat_00003.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-admin-webapps@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-docs-webapp@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-el-5.0-api@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-javadoc@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-jsp-3.1-api@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-lib@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-selinux@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-servlet-6.0-api@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product": {
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_id": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-webapps@11.0.21-5.redhat_00004.1.el10jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"product": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"product_id": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-jboss-logging@3.6.2-1.Final_redhat_00001.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"product": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"product_id": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-ecj@4.38.0-1.redhat_00001.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"product": {
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"product_id": "jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-filesystem@6.0.0-1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"product": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"product_id": "jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-tools@6.0.0-1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"product": {
"name": "jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"product_id": "jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-python3-javapackages@6.0.0-1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"product": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"product_id": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster@2.1.0-1.Final_redhat_00001.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"product": {
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"product_id": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster-tomcat@2.1.0-1.Final_redhat_00001.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"product_id": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault@1.1.11-4.Final_redhat_00003.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"product_id": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault-javadoc@1.1.11-4.Final_redhat_00003.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-admin-webapps@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-docs-webapp@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-el-5.0-api@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-javadoc@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-jsp-3.1-api@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-lib@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-selinux@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-servlet-6.0-api@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product": {
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_id": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-webapps@11.0.21-5.redhat_00004.1.el8jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"product": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"product_id": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-jboss-logging@3.6.2-1.Final_redhat_00001.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"product": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"product_id": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-ecj@4.38.0-1.redhat_00001.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"product": {
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"product_id": "jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-filesystem@6.0.0-1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"product": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"product_id": "jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-javapackages-tools@6.0.0-1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"product": {
"name": "jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"product_id": "jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-python3-javapackages@6.0.0-1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"product": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"product_id": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster@2.1.0-1.Final_redhat_00001.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"product": {
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"product_id": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-mod_cluster-tomcat@2.1.0-1.Final_redhat_00001.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"product_id": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault@1.1.11-4.Final_redhat_00003.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"product_id": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-vault-javadoc@1.1.11-4.Final_redhat_00003.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-admin-webapps@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-docs-webapp@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-el-5.0-api@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-javadoc@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-jsp-3.1-api@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-lib@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-selinux@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-servlet-6.0-api@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product": {
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_id": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jws7-tomcat-webapps@11.0.21-5.redhat_00004.1.el9jws?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-build-0:1-1.el10jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64"
},
"product_reference": "jws7-build-0:1-1.el10jws.x86_64",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch"
},
"product_reference": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src"
},
"product_reference": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch"
},
"product_reference": "jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch"
},
"product_reference": "jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el10jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src"
},
"product_reference": "jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch"
},
"product_reference": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src"
},
"product_reference": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch"
},
"product_reference": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src"
},
"product_reference": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch"
},
"product_reference": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch"
},
"product_reference": "jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-runtime-0:1-1.el10jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64"
},
"product_reference": "jws7-runtime-0:1-1.el10jws.x86_64",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src"
},
"product_reference": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src"
},
"product_reference": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64"
},
"product_reference": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64"
},
"product_reference": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src"
},
"product_reference": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 10",
"product_id": "10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch"
},
"product_reference": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"relates_to_product_reference": "10Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-build-0:1-1.el8jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64"
},
"product_reference": "jws7-build-0:1-1.el8jws.x86_64",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch"
},
"product_reference": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src"
},
"product_reference": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch"
},
"product_reference": "jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch"
},
"product_reference": "jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el8jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src"
},
"product_reference": "jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch"
},
"product_reference": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src"
},
"product_reference": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch"
},
"product_reference": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src"
},
"product_reference": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch"
},
"product_reference": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch"
},
"product_reference": "jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-runtime-0:1-1.el8jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64"
},
"product_reference": "jws7-runtime-0:1-1.el8jws.x86_64",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src"
},
"product_reference": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src"
},
"product_reference": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64"
},
"product_reference": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64"
},
"product_reference": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src"
},
"product_reference": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 8",
"product_id": "8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch"
},
"product_reference": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"relates_to_product_reference": "8Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-build-0:1-1.el9jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64"
},
"product_reference": "jws7-build-0:1-1.el9jws.x86_64",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch"
},
"product_reference": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src"
},
"product_reference": "jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch"
},
"product_reference": "jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch"
},
"product_reference": "jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-javapackages-tools-0:6.0.0-1.el9jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src"
},
"product_reference": "jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch"
},
"product_reference": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src"
},
"product_reference": "jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch"
},
"product_reference": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src"
},
"product_reference": "jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch"
},
"product_reference": "jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch"
},
"product_reference": "jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-runtime-0:1-1.el9jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64"
},
"product_reference": "jws7-runtime-0:1-1.el9jws.x86_64",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src"
},
"product_reference": "jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src"
},
"product_reference": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64"
},
"product_reference": "jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64 as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64"
},
"product_reference": "jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src"
},
"product_reference": "jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch as a component of Red Hat JBoss Web Server 7.0 on RHEL 9",
"product_id": "9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
},
"product_reference": "jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"relates_to_product_reference": "9Base-JWS-7.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-29146",
"cwe": {
"id": "CWE-1240",
"name": "Use of a Cryptographic Primitive with a Risky Implementation"
},
"discovery_date": "2026-04-09T20:01:03.123822+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457020"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Tomcat. This Padding Oracle vulnerability, present in the EncryptInterceptor with its default configuration, could allow a remote attacker to decrypt sensitive information. By exploiting weaknesses in the encryption padding, an attacker may be able to gain unauthorized access to data that should remain confidential.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A padding oracle vulnerability exists in Apache Tomcat\u0027s EncryptInterceptor when using its default configuration. This flaw could allow a remote attacker to decrypt sensitive information by exploiting weaknesses in the encryption padding. This vulnerability is not exploitable in any supported Red Hat Products. This is due to the fact EncryptInterceptor is a Tomcat component used to encrypt communication between different nodes in a cluster, however Tomcat\u0027s clustering is not tested and supported by Red Hat since Red Hat Enterprise Linux 7. More details about Tomcat\u0027s clustering in Red Hat supported products can be found at the following Solution page:\n\n~~~\nhttps://access.redhat.com/solutions/67862\n~~~",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29146"
},
{
"category": "external",
"summary": "RHBZ#2457020",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457020"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29146",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29146"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w",
"url": "https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w"
}
],
"release_date": "2026-04-09T19:21:57.289000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
},
{
"category": "workaround",
"details": "This vulnerability can be mitigated by removing the affected jar file from the tomcat installation. It can be achieved by running the following command as root:\n\n~~~\nsystemctl stop tomcat\nrm -fv /usr/share/java/tomcat/catalina-tribes.jar\nsystemctl start tomcat\n~~~\n\nIt\u0027s important to notice if the Tomcat instance is configured to run with clustering, this may lead to errors when restarting the tomcat service. Red Hat\u0027s distributed Apache Tomcat should not be run with Clustering enabled, so make sure to disable such configuration before proceed with the mitigation if that\u0027s the case.",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor"
},
{
"cve": "CVE-2026-34486",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-04-09T20:01:26.022716+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457027"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Tomcat. This vulnerability, categorized as Missing Encryption of Sensitive Data, arises from a bypass in the EncryptInterceptor, a component designed to ensure data encryption. This bypass, introduced as a fix for CVE-2026-29146, allows sensitive data to remain unencrypted, potentially leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Apache Tomcat where a bypass in the EncryptInterceptor allows sensitive data to remain unencrypted. This could lead to information disclosure in Red Hat Enterprise Linux and Red Hat JBoss Web Server environments utilizing affected versions of Apache Tomcat.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34486"
},
{
"category": "external",
"summary": "RHBZ#2457027",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457027"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly",
"url": "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2026-04-09T19:35:35.994000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2026-08-04T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass"
},
{
"cve": "CVE-2026-41284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-12T16:01:43.841831+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476518"
}
],
"notes": [
{
"category": "description",
"text": "In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service (DoS), making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41284"
},
{
"category": "external",
"summary": "RHBZ#2476518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476518"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41284"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc",
"url": "https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc"
}
],
"release_date": "2026-05-12T15:14:45.278000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-41293",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-05-12T16:01:31.003990+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476513"
}
],
"notes": [
{
"category": "description",
"text": "Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41293"
},
{
"category": "external",
"summary": "RHBZ#2476513",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476513"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41293"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41293",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41293"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r",
"url": "https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r"
}
],
"release_date": "2026-05-12T15:19:35.179000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated"
},
{
"cve": "CVE-2026-42498",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-05-12T16:01:38.872167+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476516"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Tomcat. During WebSocket authentication, the HTTP Authentication Header can be exposed to unexpected hosts. This vulnerability leads to information disclosure, potentially allowing an attacker to gain access to sensitive authentication credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42498"
},
{
"category": "external",
"summary": "RHBZ#2476516",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476516"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42498"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb",
"url": "https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb"
}
],
"release_date": "2026-05-12T15:17:56.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication."
},
{
"cve": "CVE-2026-43512",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-12T16:01:26.008892+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476511"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password \"null\". This allows a remote attacker to bypass security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Apache Tomcat allows an authentication bypass when DIGEST authentication is configured. An attacker can authenticate as any unknown user by providing the password \u0027null\u0027, potentially gaining unauthorized access to applications protected by DIGEST authentication. Red Hat products are only affected if they are configured to use DIGEST authentication, which is not a common, out of the box and expected configuration for Production environments. \n\nFurthermore, because the unknown user is not mapped to any valid realm roles, their access is still restricted by standard application authorization constraints, significantly limiting the actual impact.\n\nThe unknown user is not mapped to any existing user, which means, it does not steal credentials nor impersonate an existing user. This new user is expected to have the minimum possible authentication and authorization range within the realm inherited roles.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43512"
},
{
"category": "external",
"summary": "RHBZ#2476511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43512"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73",
"url": "https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73"
}
],
"release_date": "2026-05-12T15:24:02.424000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable DIGEST authentication within Apache Tomcat if it is not essential for your environment. This involves modifying the server\u0027s authentication configuration to utilize alternative methods or remove the DIGEST realm. A service restart is required for these changes to take effect and may impact functionality relying on DIGEST authentication.",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication"
},
{
"cve": "CVE-2026-43513",
"cwe": {
"id": "CWE-178",
"name": "Improper Handling of Case Sensitivity"
},
"discovery_date": "2026-05-12T16:01:48.767743+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476520"
}
],
"notes": [
{
"category": "description",
"text": "In Apache Tomcat, LockOutRealm mishandled case sensitivity in usernames, resulting in less effective blocking of brute force attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Apache Tomcat\u0027s LockOutRealm. When configured with an underlying Realm where usernames are case-insensitive, the LockOutRealm does not account for case differences, potentially reducing the effectiveness of brute-force protection. Exploitation requires LockOutRealm to be configured with a case-insensitive authentication backend, which is a non-default configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43513"
},
{
"category": "external",
"summary": "RHBZ#2476520",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476520"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43513"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43513"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp",
"url": "https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp"
}
],
"release_date": "2026-05-12T15:26:25.599000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
},
{
"category": "workaround",
"details": "This vulnerability only affects Tomcat deployments using the LockOutRealm with a case-insensitive authentication backend. Deployments not using LockOutRealm or using case-sensitive authentication backends are not affected.",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm"
},
{
"cve": "CVE-2026-43514",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"discovery_date": "2026-05-12T16:01:28.665836+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476512"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Tomcat. The AJP secret was comparable in non-constant time, allowing an attacker on the local network to mount a timing attack to determine the AJP secret, which may lead to unauthorized access or other security bypasses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43514"
},
{
"category": "external",
"summary": "RHBZ#2476512",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476512"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43514"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43514",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43514"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/2k654v5cq123npfsd1b2kk1y30owqb1m",
"url": "https://lists.apache.org/thread/2k654v5cq123npfsd1b2kk1y30owqb1m"
}
],
"release_date": "2026-05-12T15:32:09.858000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy"
},
{
"cve": "CVE-2026-43515",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-12T16:01:46.217175+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476519"
}
],
"notes": [
{
"category": "description",
"text": "In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat-coyote: tomcat: Improper Authorization allows security bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43515"
},
{
"category": "external",
"summary": "RHBZ#2476519",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476519"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43515"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43515",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43515"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bb",
"url": "https://lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bb"
}
],
"release_date": "2026-05-12T15:33:23.311000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat-coyote: tomcat: Improper Authorization allows security bypass"
},
{
"cve": "CVE-2026-55956",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T21:01:42.101197+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494676"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Tomcat where access control rules for the default servlet are improperly handled. An attacker can exploit this issue to bypass specific HTTP method restrictions, potentially gaining unauthorized access to protected application resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A security flaw in Apache Tomcat allows an attacker to bypass specific HTTP method restrictions on the default servlet. Red Hat products utilizing affected Tomcat versions are vulnerable if they rely on these method-specific security constraints. This could potentially enable unauthorized access to restricted application resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"known_not_affected": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55956"
},
{
"category": "external",
"summary": "RHBZ#2494676",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494676"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55956"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/dcjdcnnnww9hhdm016hr0l7hpw1bzjfp",
"url": "https://lists.apache.org/thread/dcjdcnnnww9hhdm016hr0l7hpw1bzjfp"
}
],
"release_date": "2026-06-29T20:46:02.927000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T18:04:24+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39188"
},
{
"category": "workaround",
"details": "Review your application\u0027s web.xml file. Ensure security constraints explicitly deny unauthorized users by path, rather than relying strictly on filtering specific HTTP methods (like GET or POST).",
"product_ids": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"10Base-JWS-7.0:jws7-build-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el10jws.src",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el10jws.src",
"10Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el10jws.noarch",
"10Base-JWS-7.0:jws7-runtime-0:1-1.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el10jws.x86_64",
"10Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el10jws.src",
"10Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el10jws.noarch",
"10Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el10jws.noarch",
"8Base-JWS-7.0:jws7-build-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el8jws.src",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el8jws.src",
"8Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el8jws.noarch",
"8Base-JWS-7.0:jws7-runtime-0:1-1.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el8jws.x86_64",
"8Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el8jws.src",
"8Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el8jws.noarch",
"8Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el8jws.noarch",
"9Base-JWS-7.0:jws7-build-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-ecj-0:4.38.0-1.redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-javapackages-filesystem-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-javapackages-tools-0:6.0.0-1.el9jws.src",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-jboss-logging-0:3.6.2-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-mod_cluster-0:2.1.0-1.Final_redhat_00001.1.el9jws.src",
"9Base-JWS-7.0:jws7-mod_cluster-tomcat-0:2.1.0-1.Final_redhat_00001.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-python3-javapackages-0:6.0.0-1.el9jws.noarch",
"9Base-JWS-7.0:jws7-runtime-0:1-1.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-0:11.0.21-5.redhat_00004.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-admin-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-docs-webapp-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-el-5.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-javadoc-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-jsp-3.1-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-lib-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-native-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-native-debuginfo-0:1.3.7-2.redhat_2.el9jws.x86_64",
"9Base-JWS-7.0:jws7-tomcat-selinux-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-servlet-6.0-api-0:11.0.21-5.redhat_00004.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-vault-0:1.1.11-4.Final_redhat_00003.1.el9jws.src",
"9Base-JWS-7.0:jws7-tomcat-vault-javadoc-0:1.1.11-4.Final_redhat_00003.1.el9jws.noarch",
"9Base-JWS-7.0:jws7-tomcat-webapps-0:11.0.21-5.redhat_00004.1.el9jws.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…