title: Red Hat Security Advisory: pki-deps:10.6 security update
description: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins tomcat: Host name verification missing in WebSocket client tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up tomcat: Open redirect in default servlet
cpes: cpe:/a:redhat:enterprise_linux:8::appstream