製品・ソフトウェアに関する情報

JVN脆弱性詳細

Apache Tomcat におけるアクセス制限を回避される脆弱性

タイトル	Apache Tomcat におけるアクセス制限を回避される脆弱性
概要	Apache Tomcat の HTTP Digest Access Authentication の実装には、セッション状態において、認証されたユーザに関する情報をキャッシュするため、アクセス制限を回避される脆弱性が存在します。
想定される影響	第三者により、アクセス制限を回避される可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2012年11月5日0:00
登録日	2012年11月20日11:13
最終更新日	2016年2月16日13:51

CVSS2.0 : 警告
スコア	5
ベクター	AV:N/AC:L/Au:N/C:N/I:P/A:N

影響を受けるシステム

Apache Software Foundation

Apache Tomcat 5.5.36 未満の 5.5.x

Apache Tomcat 6.0.36 未満の 6.x

Apache Tomcat 7.0.30 未満の 7.x

Apache Tomcat 5.5.36 未満の 5.5.x

Apache Tomcat 6.0.36 未満の 6.x

Apache Tomcat 7.0.30 未満の 7.x

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-5886	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5886
2	CVE-2012-5886	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5886
National Vulnerability Database (NVD)
3	CVE-2012-5886	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5886
4	CVE-2012-5886	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5886

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-287	https://jvndb.jvn.jp/ja/cwe/CWE-287.html
2	CWE-287	https://jvndb.jvn.jp/ja/cwe/CWE-287.html

ベンダー情報

No	名前	URL
Apache Tomcat
1	Fixed in Apache Tomcat 5.5.36	http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.36
2	Fixed in Apache Tomcat 5.5.36	http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.36
3	Fixed in Apache Tomcat 6.0.36	http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.36
4	Fixed in Apache Tomcat 6.0.36	http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.36
5	Fixed in Apache Tomcat 7.0.30	http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.30
6	Fixed in Apache Tomcat 7.0.30	http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.30
Apache-SVN
7	Revision 1377807	http://svn.apache.org/viewvc?view=revision&revision=1377807
8	Revision 1377807	http://svn.apache.org/viewvc?view=revision&revision=1377807
9	Revision 1380829	http://svn.apache.org/viewvc?view=revision&revision=1380829
10	Revision 1380829	http://svn.apache.org/viewvc?view=revision&revision=1380829
11	Revision 1392248	http://svn.apache.org/viewvc?view=revision&revision=1392248
12	Revision 1392248	http://svn.apache.org/viewvc?view=revision&revision=1392248
IBM セキュリティー情報
13	1626891	http://www-01.ibm.com/support/docview.wss?uid=swg21626891
14	1626891	http://www-01.ibm.com/support/docview.wss?uid=swg21626891
Red Hat Security Advisory
15	RHSA-2013:0623	https://rhn.redhat.com/errata/RHSA-2013-0623.html
16	RHSA-2013:0623	https://rhn.redhat.com/errata/RHSA-2013-0623.html
17	RHSA-2013:0629	https://rhn.redhat.com/errata/RHSA-2013-0629.html
18	RHSA-2013:0629	https://rhn.redhat.com/errata/RHSA-2013-0629.html
19	RHSA-2013:0631	https://rhn.redhat.com/errata/RHSA-2013-0631.html
20	RHSA-2013:0631	https://rhn.redhat.com/errata/RHSA-2013-0631.html
21	RHSA-2013:0632	https://rhn.redhat.com/errata/RHSA-2013-0632.html
22	RHSA-2013:0632	https://rhn.redhat.com/errata/RHSA-2013-0632.html
23	RHSA-2013:0633	https://rhn.redhat.com/errata/RHSA-2013-0633.html
24	RHSA-2013:0633	https://rhn.redhat.com/errata/RHSA-2013-0633.html
25	RHSA-2013:0640	https://rhn.redhat.com/errata/RHSA-2013-0640.html
26	RHSA-2013:0640	https://rhn.redhat.com/errata/RHSA-2013-0640.html
27	RHSA-2013:0647	https://rhn.redhat.com/errata/RHSA-2013-0647.html
28	RHSA-2013:0647	https://rhn.redhat.com/errata/RHSA-2013-0647.html
29	RHSA-2013:0648	https://rhn.redhat.com/errata/RHSA-2013-0648.html
30	RHSA-2013:0648	https://rhn.redhat.com/errata/RHSA-2013-0648.html
31	RHSA-2013:0726	https://rhn.redhat.com/errata/RHSA-2013-0726.html
32	RHSA-2013:0726	https://rhn.redhat.com/errata/RHSA-2013-0726.html
SECURITY BLOG
33	Multiple vulnerabilities in Apache Tomcat	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_apache_tomcat3
34	Multiple vulnerabilities in Apache Tomcat	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_apache_tomcat3
Ubuntu Security Notice
35	USN-1637-1	http://www.ubuntu.com/usn/USN-1637-1/
36	USN-1637-1	http://www.ubuntu.com/usn/USN-1637-1/

変更履歴

No	変更内容	変更日
0	[2012年11月20日] 掲載 [2012年12月26日] ベンダ情報：Ubuntu (USN-1637-1) を追加 [2013年03月08日] ベンダ情報：オラクル (Multiple vulnerabilities in Apache Tomcat) を追加 [2016年02月16日] ベンダ情報：レッドハット (RHSA-2013:0623) を追加ベンダ情報：レッドハット (RHSA-2013:0629) を追加ベンダ情報：レッドハット (RHSA-2013:0631) を追加ベンダ情報：レッドハット (RHSA-2013:0632) を追加ベンダ情報：レッドハット (RHSA-2013:0726) を追加ベンダ情報：レッドハット (RHSA-2013:0648) を追加ベンダ情報：レッドハット (RHSA-2013:0647) を追加ベンダ情報：レッドハット (RHSA-2013:0640) を追加ベンダ情報：レッドハット (RHSA-2013:0633) を追加ベンダ情報：IBM (1626891) を追加	2018年2月17日10:37

NVD脆弱性情報

CVE-2012-5886

概要	The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.
公表日	2012年11月18日4:55
登録日	2021年1月28日15:06
最終更新日	2024年11月21日10:45

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:5.5.27:::::::*
cpe:2.3:a:apache:tomcat:5.5.18:::::::*
cpe:2.3:a:apache:tomcat:5.5.12:::::::*
cpe:2.3:a:apache:tomcat:5.5.14:::::::*
cpe:2.3:a:apache:tomcat:5.5.10:::::::*
cpe:2.3:a:apache:tomcat:5.5.4:::::::*
cpe:2.3:a:apache:tomcat:5.5.7:::::::*
cpe:2.3:a:apache:tomcat:5.5.1:::::::*
cpe:2.3:a:apache:tomcat:5.5.11:::::::*
cpe:2.3:a:apache:tomcat:5.5.28:::::::*
cpe:2.3:a:apache:tomcat:5.5.6:::::::*
cpe:2.3:a:apache:tomcat:5.5.26:::::::*
cpe:2.3:a:apache:tomcat:5.5.35:::::::*
cpe:2.3:a:apache:tomcat:5.5.20:::::::*
cpe:2.3:a:apache:tomcat:5.5.15:::::::*
cpe:2.3:a:apache:tomcat:5.5.5:::::::*
cpe:2.3:a:apache:tomcat:5.5.30:::::::*
cpe:2.3:a:apache:tomcat:5.5.21:::::::*
cpe:2.3:a:apache:tomcat:5.5.22:::::::*
cpe:2.3:a:apache:tomcat:5.5.3:::::::*
cpe:2.3:a:apache:tomcat:5.5.32:::::::*
cpe:2.3:a:apache:tomcat:5.5.31:::::::*
cpe:2.3:a:apache:tomcat:5.5.9:::::::*
cpe:2.3:a:apache:tomcat:5.5.25:::::::*
cpe:2.3:a:apache:tomcat:5.5.33:::::::*
cpe:2.3:a:apache:tomcat:5.5.2:::::::*
cpe:2.3:a:apache:tomcat:5.5.0:::::::*
cpe:2.3:a:apache:tomcat:5.5.13:::::::*
cpe:2.3:a:apache:tomcat:5.5.24:::::::*
cpe:2.3:a:apache:tomcat:5.5.34:::::::*
cpe:2.3:a:apache:tomcat:5.5.8:::::::*
cpe:2.3:a:apache:tomcat:5.5.16:::::::*
cpe:2.3:a:apache:tomcat:5.5.17:::::::*
cpe:2.3:a:apache:tomcat:5.5.29:::::::*
cpe:2.3:a:apache:tomcat:5.5.19:::::::*
cpe:2.3:a:apache:tomcat:5.5.23:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:6.0.33:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.6:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.11:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:::::::*
cpe:2.3:a:apache:tomcat:6.0.15:::::::*
cpe:2.3:a:apache:tomcat:6.0.20:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:beta::::::
cpe:2.3:a:apache:tomcat:6.0.10:::::::*
cpe:2.3:a:apache:tomcat:6.0.31:::::::*
cpe:2.3:a:apache:tomcat:6.0.29:::::::*
cpe:2.3:a:apache:tomcat:6.0.3:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:::::::*
cpe:2.3:a:apache:tomcat:6.0.1:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.7:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.24:::::::*
cpe:2.3:a:apache:tomcat:6.0.17:::::::*
cpe:2.3:a:apache:tomcat:6.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.32:::::::*
cpe:2.3:a:apache:tomcat:6.0.28:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.14:::::::*
cpe:2.3:a:apache:tomcat:6.0.6:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.1:::::::*
cpe:2.3:a:apache:tomcat:6.0.12:::::::*
cpe:2.3:a:apache:tomcat:6.0.18:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.5:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:beta::::::
cpe:2.3:a:apache:tomcat:6.0.30:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:beta::::::
cpe:2.3:a:apache:tomcat:6.0.13:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.26:::::::*
cpe:2.3:a:apache:tomcat:6.0.19:::::::*
cpe:2.3:a:apache:tomcat:6.0.27:::::::*
cpe:2.3:a:apache:tomcat:6.0.35:::::::*
cpe:2.3:a:apache:tomcat:6.0.16:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:::::::*

構成3	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:7.0.2:beta::::::
cpe:2.3:a:apache:tomcat:7.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.8:::::::*
cpe:2.3:a:apache:tomcat:7.0.1:::::::*
cpe:2.3:a:apache:tomcat:7.0.2:::::::*
cpe:2.3:a:apache:tomcat:7.0.5:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:beta::::::
cpe:2.3:a:apache:tomcat:7.0.22:::::::*
cpe:2.3:a:apache:tomcat:7.0.28:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:::::::*
cpe:2.3:a:apache:tomcat:7.0.6:::::::*
cpe:2.3:a:apache:tomcat:7.0.18:::::::*
cpe:2.3:a:apache:tomcat:7.0.14:::::::*
cpe:2.3:a:apache:tomcat:7.0.11:::::::*
cpe:2.3:a:apache:tomcat:7.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:beta::::::
cpe:2.3:a:apache:tomcat:7.0.7:::::::*
cpe:2.3:a:apache:tomcat:7.0.13:::::::*
cpe:2.3:a:apache:tomcat:7.0.15:::::::*
cpe:2.3:a:apache:tomcat:7.0.19:::::::*
cpe:2.3:a:apache:tomcat:7.0.16:::::::*
cpe:2.3:a:apache:tomcat:7.0.10:::::::*
cpe:2.3:a:apache:tomcat:7.0.25:::::::*
cpe:2.3:a:apache:tomcat:7.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.17:::::::*
cpe:2.3:a:apache:tomcat:7.0.9:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:::::::*
cpe:2.3:a:apache:tomcat:7.0.3:::::::*

構成1	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:5.5.27:::::::*
cpe:2.3:a:apache:tomcat:5.5.18:::::::*
cpe:2.3:a:apache:tomcat:5.5.12:::::::*
cpe:2.3:a:apache:tomcat:5.5.14:::::::*
cpe:2.3:a:apache:tomcat:5.5.10:::::::*
cpe:2.3:a:apache:tomcat:5.5.4:::::::*
cpe:2.3:a:apache:tomcat:5.5.7:::::::*
cpe:2.3:a:apache:tomcat:5.5.1:::::::*
cpe:2.3:a:apache:tomcat:5.5.11:::::::*
cpe:2.3:a:apache:tomcat:5.5.28:::::::*
cpe:2.3:a:apache:tomcat:5.5.6:::::::*
cpe:2.3:a:apache:tomcat:5.5.26:::::::*
cpe:2.3:a:apache:tomcat:5.5.35:::::::*
cpe:2.3:a:apache:tomcat:5.5.20:::::::*
cpe:2.3:a:apache:tomcat:5.5.15:::::::*
cpe:2.3:a:apache:tomcat:5.5.5:::::::*
cpe:2.3:a:apache:tomcat:5.5.30:::::::*
cpe:2.3:a:apache:tomcat:5.5.21:::::::*
cpe:2.3:a:apache:tomcat:5.5.22:::::::*
cpe:2.3:a:apache:tomcat:5.5.3:::::::*
cpe:2.3:a:apache:tomcat:5.5.32:::::::*
cpe:2.3:a:apache:tomcat:5.5.31:::::::*
cpe:2.3:a:apache:tomcat:5.5.9:::::::*
cpe:2.3:a:apache:tomcat:5.5.25:::::::*
cpe:2.3:a:apache:tomcat:5.5.33:::::::*
cpe:2.3:a:apache:tomcat:5.5.2:::::::*
cpe:2.3:a:apache:tomcat:5.5.0:::::::*
cpe:2.3:a:apache:tomcat:5.5.13:::::::*
cpe:2.3:a:apache:tomcat:5.5.24:::::::*
cpe:2.3:a:apache:tomcat:5.5.34:::::::*
cpe:2.3:a:apache:tomcat:5.5.8:::::::*
cpe:2.3:a:apache:tomcat:5.5.16:::::::*
cpe:2.3:a:apache:tomcat:5.5.17:::::::*
cpe:2.3:a:apache:tomcat:5.5.29:::::::*
cpe:2.3:a:apache:tomcat:5.5.19:::::::*
cpe:2.3:a:apache:tomcat:5.5.23:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:6.0.33:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.6:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.11:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:::::::*
cpe:2.3:a:apache:tomcat:6.0.4:::::::*
cpe:2.3:a:apache:tomcat:6.0.15:::::::*
cpe:2.3:a:apache:tomcat:6.0.20:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:beta::::::
cpe:2.3:a:apache:tomcat:6.0.10:::::::*
cpe:2.3:a:apache:tomcat:6.0.31:::::::*
cpe:2.3:a:apache:tomcat:6.0.29:::::::*
cpe:2.3:a:apache:tomcat:6.0.3:::::::*
cpe:2.3:a:apache:tomcat:6.0.9:::::::*
cpe:2.3:a:apache:tomcat:6.0.1:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.7:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.24:::::::*
cpe:2.3:a:apache:tomcat:6.0.17:::::::*
cpe:2.3:a:apache:tomcat:6.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.32:::::::*
cpe:2.3:a:apache:tomcat:6.0.28:::::::*
cpe:2.3:a:apache:tomcat:6.0.0:::::::*
cpe:2.3:a:apache:tomcat:6.0.14:::::::*
cpe:2.3:a:apache:tomcat:6.0.6:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.1:::::::*
cpe:2.3:a:apache:tomcat:6.0.12:::::::*
cpe:2.3:a:apache:tomcat:6.0.18:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.5:::::::*
cpe:2.3:a:apache:tomcat:6.0.7:beta::::::
cpe:2.3:a:apache:tomcat:6.0.30:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:::::::*
cpe:2.3:a:apache:tomcat:6.0.2:beta::::::
cpe:2.3:a:apache:tomcat:6.0.13:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:alpha::::::
cpe:2.3:a:apache:tomcat:6.0.26:::::::*
cpe:2.3:a:apache:tomcat:6.0.19:::::::*
cpe:2.3:a:apache:tomcat:6.0.27:::::::*
cpe:2.3:a:apache:tomcat:6.0.35:::::::*
cpe:2.3:a:apache:tomcat:6.0.16:::::::*
cpe:2.3:a:apache:tomcat:6.0.8:::::::*

構成3	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:7.0.2:beta::::::
cpe:2.3:a:apache:tomcat:7.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.8:::::::*
cpe:2.3:a:apache:tomcat:7.0.1:::::::*
cpe:2.3:a:apache:tomcat:7.0.2:::::::*
cpe:2.3:a:apache:tomcat:7.0.5:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:beta::::::
cpe:2.3:a:apache:tomcat:7.0.22:::::::*
cpe:2.3:a:apache:tomcat:7.0.28:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:::::::*
cpe:2.3:a:apache:tomcat:7.0.6:::::::*
cpe:2.3:a:apache:tomcat:7.0.18:::::::*
cpe:2.3:a:apache:tomcat:7.0.14:::::::*
cpe:2.3:a:apache:tomcat:7.0.11:::::::*
cpe:2.3:a:apache:tomcat:7.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:beta::::::
cpe:2.3:a:apache:tomcat:7.0.7:::::::*
cpe:2.3:a:apache:tomcat:7.0.13:::::::*
cpe:2.3:a:apache:tomcat:7.0.15:::::::*
cpe:2.3:a:apache:tomcat:7.0.19:::::::*
cpe:2.3:a:apache:tomcat:7.0.16:::::::*
cpe:2.3:a:apache:tomcat:7.0.10:::::::*
cpe:2.3:a:apache:tomcat:7.0.25:::::::*
cpe:2.3:a:apache:tomcat:7.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.17:::::::*
cpe:2.3:a:apache:tomcat:7.0.9:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:::::::*
cpe:2.3:a:apache:tomcat:7.0.3:::::::*

No	URL	タグ
1	http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
2	http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
3	http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
4	http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
5	http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
6	http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
7	http://rhn.redhat.com/errata/RHSA-2013-0623.html
8	http://rhn.redhat.com/errata/RHSA-2013-0623.html
9	http://rhn.redhat.com/errata/RHSA-2013-0629.html
10	http://rhn.redhat.com/errata/RHSA-2013-0629.html
11	http://rhn.redhat.com/errata/RHSA-2013-0631.html
12	http://rhn.redhat.com/errata/RHSA-2013-0631.html
13	http://rhn.redhat.com/errata/RHSA-2013-0632.html
14	http://rhn.redhat.com/errata/RHSA-2013-0632.html
15	http://rhn.redhat.com/errata/RHSA-2013-0633.html
16	http://rhn.redhat.com/errata/RHSA-2013-0633.html
17	http://rhn.redhat.com/errata/RHSA-2013-0640.html
18	http://rhn.redhat.com/errata/RHSA-2013-0640.html
19	http://rhn.redhat.com/errata/RHSA-2013-0647.html
20	http://rhn.redhat.com/errata/RHSA-2013-0647.html
21	http://rhn.redhat.com/errata/RHSA-2013-0648.html
22	http://rhn.redhat.com/errata/RHSA-2013-0648.html
23	http://rhn.redhat.com/errata/RHSA-2013-0726.html
24	http://rhn.redhat.com/errata/RHSA-2013-0726.html
25	http://secunia.com/advisories/51371
26	http://secunia.com/advisories/51371
27	http://svn.apache.org/viewvc?view=revision&revision=1377807
28	http://svn.apache.org/viewvc?view=revision&revision=1377807
29	http://svn.apache.org/viewvc?view=revision&revision=1380829
30	http://svn.apache.org/viewvc?view=revision&revision=1380829
31	http://svn.apache.org/viewvc?view=revision&revision=1392248
32	http://svn.apache.org/viewvc?view=revision&revision=1392248
33	http://tomcat.apache.org/security-5.html	Vendor Advisory
34	http://tomcat.apache.org/security-5.html	Vendor Advisory
35	http://tomcat.apache.org/security-6.html	Vendor Advisory
36	http://tomcat.apache.org/security-6.html	Vendor Advisory
37	http://tomcat.apache.org/security-7.html	Vendor Advisory
38	http://tomcat.apache.org/security-7.html	Vendor Advisory
39	http://www.securityfocus.com/bid/56403
40	http://www.securityfocus.com/bid/56403
41	http://www.ubuntu.com/usn/USN-1637-1
42	http://www.ubuntu.com/usn/USN-1637-1
43	http://www-01.ibm.com/support/docview.wss?uid=swg21626891
44	http://www-01.ibm.com/support/docview.wss?uid=swg21626891
45	https://exchange.xforce.ibmcloud.com/vulnerabilities/80407
46	https://exchange.xforce.ibmcloud.com/vulnerabilities/80407