Author: markt
Date: Fri Feb 23 19:26:18 2018
New Revision: 1825160
URL: http://svn.apache.org/viewvc?rev=1825160&view=rev
Log:
Important not high
Modified:
tomcat/site/trunk/docs/security-7.html
tomcat/site/trunk/docs/security-8.html
tomcat/site/trunk/docs/security-9.html
tomcat/site/trunk/xdocs/security-7.xml
tomcat/site/trunk/xdocs/security-8.xml
tomcat/site/trunk/xdocs/security-9.xml
Modified: tomcat/site/trunk/docs/security-7.html
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-7.html?rev=1825160&r1=1825159&r2=1825160&view=diff
==============================================================================
--- tomcat/site/trunk/docs/security-7.html (original)
+++ tomcat/site/trunk/docs/security-7.html Fri Feb 23 19:26:18 2018
@@ -393,8 +393,8 @@
<p>
-<strong>High: Security constraint annotations applied too late</strong>
- <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
+<strong>Important: Security constraint annotations applied too
+ late</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
</p>
@@ -418,7 +418,7 @@
<p>
-<strong>High: Security constraints mapped to context root are
+<strong>Important: Security constraints mapped to context root are
ignored</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1304";
rel="nofollow">CVE-2018-1304</a>
</p>
Modified: tomcat/site/trunk/docs/security-8.html
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-8.html?rev=1825160&r1=1825159&r2=1825160&view=diff
==============================================================================
--- tomcat/site/trunk/docs/security-8.html (original)
+++ tomcat/site/trunk/docs/security-8.html Fri Feb 23 19:26:18 2018
@@ -366,8 +366,8 @@
<p>
-<strong>High: Security constraint annotations applied too late</strong>
- <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
+<strong>Important: Security constraint annotations applied too
+ late</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
</p>
@@ -391,7 +391,7 @@
<p>
-<strong>High: Security constraints mapped to context root are
+<strong>Important: Security constraints mapped to context root are
ignored</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1304";
rel="nofollow">CVE-2018-1304</a>
</p>
@@ -422,8 +422,8 @@
<p>
-<strong>High: Security constraint annotations applied too late</strong>
- <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
+<strong>Important: Security constraint annotations applied too
+ late</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
</p>
@@ -447,7 +447,7 @@
<p>
-<strong>High: Security constraints mapped to context root are
+<strong>Important: Security constraints mapped to context root are
ignored</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1304";
rel="nofollow">CVE-2018-1304</a>
</p>
Modified: tomcat/site/trunk/docs/security-9.html
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/security-9.html?rev=1825160&r1=1825159&r2=1825160&view=diff
==============================================================================
--- tomcat/site/trunk/docs/security-9.html (original)
+++ tomcat/site/trunk/docs/security-9.html Fri Feb 23 19:26:18 2018
@@ -309,8 +309,8 @@
<p>
-<strong>High: Security constraint annotations applied too late</strong>
- <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
+<strong>Important: Security constraint annotations applied too
+ late</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1305";
rel="nofollow">CVE-2018-1305</a>
</p>
@@ -334,7 +334,7 @@
<p>
-<strong>High: Security constraints mapped to context root are
+<strong>Important: Security constraints mapped to context root are
ignored</strong> <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1304";
rel="nofollow">CVE-2018-1304</a>
</p>
Modified: tomcat/site/trunk/xdocs/security-7.xml
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-7.xml?rev=1825160&r1=1825159&r2=1825160&view=diff
==============================================================================
--- tomcat/site/trunk/xdocs/security-7.xml (original)
+++ tomcat/site/trunk/xdocs/security-7.xml Fri Feb 23 19:26:18 2018
@@ -52,8 +52,8 @@
<section name="Fixed in Apache Tomcat 7.0.85" rtext="13 February 2018">
- <p><strong>High: Security constraint annotations applied too late</strong>
- <cve>CVE-2018-1305</cve></p>
+ <p><strong>Important: Security constraint annotations applied too
+ late</strong> <cve>CVE-2018-1305</cve></p>
<p>Security constraints defined by annotations of Servlets were only
applied
once a Servlet had been loaded. Because security constraints defined in
@@ -70,7 +70,7 @@
<p>Affects: 8.0.0.RC1 to 8.0.49</p>
- <p><strong>High: Security constraints mapped to context root are
+ <p><strong>Important: Security constraints mapped to context root are
ignored</strong> <cve>CVE-2018-1304</cve></p>
<p>The URL pattern of "" (the empty string) which exactly maps to the
Modified: tomcat/site/trunk/xdocs/security-8.xml
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-8.xml?rev=1825160&r1=1825159&r2=1825160&view=diff
==============================================================================
--- tomcat/site/trunk/xdocs/security-8.xml (original)
+++ tomcat/site/trunk/xdocs/security-8.xml Fri Feb 23 19:26:18 2018
@@ -52,8 +52,8 @@
<section name="Fixed in Apache Tomcat 8.0.50" rtext="13 February 2018">
- <p><strong>High: Security constraint annotations applied too late</strong>
- <cve>CVE-2018-1305</cve></p>
+ <p><strong>Important: Security constraint annotations applied too
+ late</strong> <cve>CVE-2018-1305</cve></p>
<p>Security constraints defined by annotations of Servlets were only
applied
once a Servlet had been loaded. Because security constraints defined in
@@ -70,7 +70,7 @@
<p>Affects: 8.0.0.RC1 to 8.0.49</p>
- <p><strong>High: Security constraints mapped to context root are
+ <p><strong>Important: Security constraints mapped to context root are
ignored</strong> <cve>CVE-2018-1304</cve></p>
<p>The URL pattern of "" (the empty string) which exactly maps to the
@@ -92,8 +92,8 @@
<section name="Fixed in Apache Tomcat 8.5.28" rtext="11 February 2018">
- <p><strong>High: Security constraint annotations applied too late</strong>
- <cve>CVE-2018-1305</cve></p>
+ <p><strong>Important: Security constraint annotations applied too
+ late</strong> <cve>CVE-2018-1305</cve></p>
<p>Security constraints defined by annotations of Servlets were only
applied
once a Servlet had been loaded. Because security constraints defined in
@@ -110,7 +110,7 @@
<p>Affects: 8.5.0 to 8.5.27</p>
- <p><strong>High: Security constraints mapped to context root are
+ <p><strong>Important: Security constraints mapped to context root are
ignored</strong> <cve>CVE-2018-1304</cve></p>
<p>The URL pattern of "" (the empty string) which exactly maps to the
Modified: tomcat/site/trunk/xdocs/security-9.xml
URL:
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/security-9.xml?rev=1825160&r1=1825159&r2=1825160&view=diff
==============================================================================
--- tomcat/site/trunk/xdocs/security-9.xml (original)
+++ tomcat/site/trunk/xdocs/security-9.xml Fri Feb 23 19:26:18 2018
@@ -52,8 +52,8 @@
<section name="Fixed in Apache Tomcat 9.0.5" rtext="11 February 2018">
- <p><strong>High: Security constraint annotations applied too late</strong>
- <cve>CVE-2018-1305</cve></p>
+ <p><strong>Important: Security constraint annotations applied too
+ late</strong> <cve>CVE-2018-1305</cve></p>
<p>Security constraints defined by annotations of Servlets were only
applied
once a Servlet had been loaded. Because security constraints defined in
@@ -70,7 +70,7 @@
<p>Affects: 9.0.0.M1 to 9.0.4</p>
- <p><strong>High: Security constraints mapped to context root are
+ <p><strong>Important: Security constraints mapped to context root are
ignored</strong> <cve>CVE-2018-1304</cve></p>
<p>The URL pattern of "" (the empty string) which exactly maps to the
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
