-
Bug
-
Resolution: Fixed
-
Medium (View bug fix roadmap)
-
8.11.0, 8.12.0, 8.5.8
-
8.05
-
14
-
Severity 2 - Major
-
59
-
Issue Summary
The recently disclosed vulnerability regarding Apache Tomcat
affects the following versions:
Apache Tomcat 8.x from 8.5.1 to 8.5.56
Apache Tomcat 9.x from 9.0.0.M5 to 9.0.36
Apache Tomcat 10.x from 10.0.0-M1 to 10.0.0-M6
Additionally, the following disclosed vulnerability regarding Tomcat:
affects the following versions:
Apache Tomcat 7.x from 7.0.27 to 7.0.104
Apache Tomcat 8.x from 8.5.1 to 8.5.56
Apache Tomcat 9.x from 9.0.0.M5 to 9.0.36
Apache Tomcat 10.x from 10.0.0-M1 to 10.0.0-M6
We should bundle a more recent version of Tomcat so that Jira is not affected by this in the future.
Steps to Reproduce
- Check the CVE reports:
Expected Results
- Not applicable.
Actual Results
- Not applicable.
Workaround
- Manually upgrade Tomcat according to our documentation.
- incorporates
-
-
- Closed
-
- is related to
-
-
- Closed
-
- relates to
-
-
- Closed
-
- blocks
-
PS-62845 You do not have permission to view this issue
- mentioned in
-
Page Failed to load
[JRASERVER-71321] Upgrade the bundled version of Apache Tomcat to 8.5.57
| Link |
New:
This issue relates to |
| Fix Version/s | New: 8.14.1 [ 93491 ] | |
| Fix Version/s | New: 8.14.0 [ 92899 ] |
| Fixed in Long Term Support Release/s | New: [Download 8.5|https://confluence.atlassian.com/enterprise/atlassian-enterprise-releases-948227420.html] |
| Link |
New:
This issue is related to |
| Introduced in Version | Original: 8.11 | New: 8.05 |
| Labels | Original: cvss-high dmb-legacy-jac-within security vulnerable-components | New: advisory advisory-released cvss-high dmb-legacy-jac-within security vulnerable-components |
| Affects Version/s | New: 8.12.0 [ 92098 ] |
| Affects Version/s | New: 8.5.8 [ 92036 ] |
| Fix Version/s | New: 8.13.0 [ 92100 ] |
| Fix Version/s | New: 8.5.9 [ 92910 ] |