Scientific Linux Security Update : tomcat6 on SL6.x (noarch)

This script is Copyright (C) 2013-2014 Tenable Network Security, Inc.

Synopsis :

The remote Scientific Linux host is missing one or more security

Description :

A session fixation flaw was found in the Tomcat FormAuthenticator
module. During a narrow window of time, if a remote attacker sent
requests while a user was logging in, it could possibly result in the
attacker's requests being processed as if they were sent by the user.

Tomcat must be restarted for this update to take effect.

See also :

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 6.8

Family: Scientific Linux Local Security Checks

Nessus Plugin ID: 66952 ()

Bugtraq ID:

CVE ID: CVE-2013-2067