Secunia Security Advisory – Red Hat has issued an update for tomcat. This fixes some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions, malicious users to disclose potentially sensitive information, and by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, or disclose sensitive information.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/70619/sa32120.txt
Source: https://packetstormsecurity.com/files/70619/Secunia-Security-Advisory-32120.html