title: Red Hat Security Advisory: tomcat6 security and bug fix update
description: tomcat: URL Normalization issue tomcat: directory disclosure tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: tomcat writable config files allow privilege escalation
cpes: cpe:/o:redhat:enterprise_linux:6::client cpe:/o:redhat:enterprise_linux:6::computenode cpe:/o:redhat:enterprise_linux:6::server cpe:/o:redhat:enterprise_linux:6::workstation