Red Hat Security Advisory: tomcat security update
Apache Tomcat's default security policy is too open Absolute path traversal Apache Tomcat WEBDAV
cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::client_workstation cpe:/o:redhat:enterprise_linux:5::server