MGASA-2017-0196

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2017-5664
Published: 29 Jun 2017, 21:40
Last modified:16 Apr 2026, 06:26

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Jun 2017, 21:40
Published
Vulnerability first disclosed
16 Apr 2026, 06:26
Last Modified
Vulnerability information updated

Description

Updated tomcat packages fix security vulnerability Aniket Nandkishor Kulkarni discovered that in tomcat7, static error pages used the original request's HTTP method to serve content, instead of systematically using the GET method. This could under certain conditions result in undesirable results, including the replacement or removal of the custom error page (CVE-2017-5664).

Affected Systems

  • mageia•tomcat

    < 7.0.78-1.mga5

References (4)