SynopsisThe remote Scientific Linux host is missing one or more security updates.
DescriptionA session fixation flaw was found in the Tomcat FormAuthenticator module. During a narrow window of time, if a remote attacker sent requests while a user was logging in, it could possibly result in the attacker's requests being processed as if they were sent by the user.
Tomcat must be restarted for this update to take effect.
SolutionUpdate the affected packages.