[SECURITY] [CORRECTION] CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass

2023-09-28 Thread Christopher Schultz
CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat Connectors mod_jk Connector 1.2.0 to 1.2.48 Description: In some circumstances, such as when a configuration included "JkOptions

[SECURITY] [CORRECTION] CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass

2023-09-28 Thread Christopher Schultz
CVE-2023-41081 Apache Tomcat Connectors (mod_jk) Authentication Bypass Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat Connectors mod_jk Connector 1.2.0 to 1.2.48 Description: In some circumstances, such as when a configuration included "JkOptions

Migrating Tomcat 8/9 and a single webapp to Java 17 disconfigures Tomcat logs

2023-09-28 Thread Alcides Moraes
Hello everyone, I’m new to the list even though I’ve been a Java web developer for many years, I’ve never had the need to post here, but this time I think I may have stumbled upon a bug, and nothing turns up online on this issue. We’re migrating our containerized legacy webapps from Java 8/11

Re: Jakarta migration issue in Tomcat 10.1.12 with Java 11

2023-09-28 Thread Mark Thomas
28 Sept 2023 03:22:26 Muralisankar Srinivasan : Dear Users, I am facing the following Exceptions from the Java Maven application which is migrated from Javax to Jakarta, using "jakartaee-migration-1.0.7". The application was successful in "Apache Tomcat Version 9.0.64". Please suggest the

Re: [External]Re: Tomcat 10 on RHEL 8 with Java 17

2023-09-28 Thread Mark Thomas
n 28/09/2023 00:22, Christopher Bland wrote: Hi Everyone, I’m making progress. I started from scratch again adding pieces back one by one. It seems like I am seeing the following errors with my configuration Could not load Logmanager "org.apache.logging.log4j.jul.LogManager"