{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2013-2185","title":"Title"},{"category":"description","text":"The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar issue to CVE-2013-2186.  NOTE: this issue is reportedly disputed by the Apache Tomcat team, although Red Hat considers it a vulnerability. The dispute appears to regard whether it is the responsibility of applications to avoid providing untrusted data to be deserialized, or whether this class should inherently protect against this issue","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2013-2185","url":"https://www.suse.com/security/cve/CVE-2013-2185"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 838671 for CVE-2013-2185","url":"https://bugzilla.suse.com/838671"},{"category":"external","summary":"SUSE Bug 896047 for CVE-2013-2185","url":"https://bugzilla.suse.com/896047"}],"title":"SUSE CVE CVE-2013-2185","tracking":{"current_release_date":"2025-07-08T00:27:29Z","generator":{"date":"2023-02-15T05:38:59Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2013-2185","initial_release_date":"2023-02-15T05:38:59Z","revision_history":[{"date":"2023-02-15T05:38:59Z","number":"2","summary":"Current version"},{"date":"2025-03-14T07:11:27Z","number":"3","summary":"Current version"},{"date":"2025-03-16T12:51:50Z","number":"4","summary":"Current version"},{"date":"2025-04-25T12:24:38Z","number":"5","summary":"Current version"},{"date":"2025-07-08T00:27:29Z","number":"6","summary":"Current version"}],"status":"interim","version":"6"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"SLES for SAP Applications 11 SP3","product":{"name":"SLES for SAP Applications 11 SP3","product_id":"SLES for SAP Applications 11 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_sap:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 12 SP4","product":{"name":"SUSE Linux Enterprise High Performance Computing 12 SP4","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-hpc:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15","product":{"name":"SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc:15"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Web and Scripting 15","product":{"name":"SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-web-scripting:15"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP3 LTSS","product":{"name":"SUSE Linux Enterprise Server 11 SP3 LTSS","product_id":"SUSE Linux Enterprise Server 11 SP3 LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_ltss:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP4 LTSS","product":{"name":"SUSE Linux Enterprise Server 11 SP4 LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4 LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_ltss:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP2-LTSS","product":{"name":"SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP3","product":{"name":"SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP4","product":{"name":"SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12-LTSS","product":{"name":"SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15","product":{"name":"SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15","product_identification_helper":{"cpe":"cpe:/o:suse:sles:15"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 12","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 12","product_id":"SUSE Linux Enterprise Server for SAP Applications 12","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:12"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 12 SP2","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 12 SP4","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:12:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 15","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:15"}}},{"category":"product_version","name":"tomcat","product":{"name":"tomcat","product_id":"tomcat","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-admin-webapps","product":{"name":"tomcat-admin-webapps","product_id":"tomcat-admin-webapps","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-admin-webapps@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-docs-webapp","product":{"name":"tomcat-docs-webapp","product_id":"tomcat-docs-webapp","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-docs-webapp@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-el-2_2-api","product":{"name":"tomcat-el-2_2-api","product_id":"tomcat-el-2_2-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-el-2_2-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-el-3_0-api","product":{"name":"tomcat-el-3_0-api","product_id":"tomcat-el-3_0-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-el-3_0-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-javadoc","product":{"name":"tomcat-javadoc","product_id":"tomcat-javadoc","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-javadoc@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-jsp-2_2-api","product":{"name":"tomcat-jsp-2_2-api","product_id":"tomcat-jsp-2_2-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-jsp-2_2-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-jsp-2_3-api","product":{"name":"tomcat-jsp-2_3-api","product_id":"tomcat-jsp-2_3-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-jsp-2_3-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-lib","product":{"name":"tomcat-lib","product_id":"tomcat-lib","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-lib@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-servlet-3_0-api","product":{"name":"tomcat-servlet-3_0-api","product_id":"tomcat-servlet-3_0-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-servlet-3_0-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-servlet-3_1-api","product":{"name":"tomcat-servlet-3_1-api","product_id":"tomcat-servlet-3_1-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-servlet-3_1-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-servlet-4_0-api","product":{"name":"tomcat-servlet-4_0-api","product_id":"tomcat-servlet-4_0-api","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-servlet-4_0-api@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat-webapps","product":{"name":"tomcat-webapps","product_id":"tomcat-webapps","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat-webapps@?upstream=tomcat.src.rpm"}}},{"category":"product_version","name":"tomcat6","product":{"name":"tomcat6","product_id":"tomcat6","product_identification_helper":{"cpe":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/tomcat6@?upstream=tomcat6.src.rpm"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SLES for SAP Applications 11 SP3","product_id":"SLES for SAP Applications 11 SP3:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SLES for SAP Applications 11 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise High Performance Computing 12 SP4","product_id":"SUSE Linux Enterprise High Performance Computing 12 SP4:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-4_0-api as component of SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15:tomcat-servlet-4_0-api"},"product_reference":"tomcat-servlet-4_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server 15","product_id":"SUSE Linux Enterprise Server 15:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-4_0-api as component of SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15:tomcat-servlet-4_0-api"},"product_reference":"tomcat-servlet-4_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server for SAP Applications 15","product_id":"SUSE Linux Enterprise Server for SAP Applications 15:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-4_0-api as component of SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15:tomcat-servlet-4_0-api"},"product_reference":"tomcat-servlet-4_0-api","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise High Performance Computing 15","product_id":"SUSE Linux Enterprise High Performance Computing 15:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-4_0-api as component of SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-servlet-4_0-api"},"product_reference":"tomcat-servlet-4_0-api","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Module for Web and Scripting 15","product_id":"SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Module for Web and Scripting 15"},{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP1 for Teradata"},{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP3 LTSS","product_id":"SUSE Linux Enterprise Server 11 SP3 LTSS:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP3 LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP3 for Teradata"},{"category":"default_component_of","full_product_name":{"name":"tomcat6 as component of SUSE Linux Enterprise Server 11 SP4 LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4 LTSS:tomcat6"},"product_reference":"tomcat6","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4 LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_1-api as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-servlet-3_1-api"},"product_reference":"tomcat-servlet-3_1-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server 12 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_1-api as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api"},"product_reference":"tomcat-servlet-3_1-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-4_0-api as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-servlet-4_0-api"},"product_reference":"tomcat-servlet-4_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server 12 SP4","product_id":"SUSE Linux Enterprise Server 12 SP4:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-2_2-api as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-el-2_2-api"},"product_reference":"tomcat-el-2_2-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_2-api as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-jsp-2_2-api"},"product_reference":"tomcat-jsp-2_2-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_0-api as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-servlet-3_0-api"},"product_reference":"tomcat-servlet-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server 12-LTSS","product_id":"SUSE Linux Enterprise Server 12-LTSS:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server 12-LTSS"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server for SAP Applications 12","product_id":"SUSE Linux Enterprise Server for SAP Applications 12:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-3_1-api as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-servlet-3_1-api"},"product_reference":"tomcat-servlet-3_1-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"tomcat as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat"},"product_reference":"tomcat","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-admin-webapps as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-admin-webapps"},"product_reference":"tomcat-admin-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-docs-webapp as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-docs-webapp"},"product_reference":"tomcat-docs-webapp","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-el-3_0-api as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-el-3_0-api"},"product_reference":"tomcat-el-3_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-javadoc as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-javadoc"},"product_reference":"tomcat-javadoc","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-jsp-2_3-api as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-jsp-2_3-api"},"product_reference":"tomcat-jsp-2_3-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-lib as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-lib"},"product_reference":"tomcat-lib","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-servlet-4_0-api as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-servlet-4_0-api"},"product_reference":"tomcat-servlet-4_0-api","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"},{"category":"default_component_of","full_product_name":{"name":"tomcat-webapps as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-webapps"},"product_reference":"tomcat-webapps","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP4"}]},"vulnerabilities":[{"cve":"CVE-2013-2185","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2013-2185"}],"notes":[{"category":"general","text":"The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar issue to CVE-2013-2186.  NOTE: this issue is reportedly disputed by the Apache Tomcat team, although Red Hat considers it a vulnerability. The dispute appears to regard whether it is the responsibility of applications to avoid providing untrusted data to be deserialized, or whether this class should inherently protect against this issue","title":"CVE description"}],"product_status":{"known_not_affected":["SLES for SAP Applications 11 SP3:tomcat6","SUSE Linux Enterprise High Performance Computing 12 SP4:tomcat","SUSE Linux Enterprise High Performance Computing 15:tomcat","SUSE Linux Enterprise High Performance Computing 15:tomcat-admin-webapps","SUSE Linux Enterprise High Performance Computing 15:tomcat-el-3_0-api","SUSE Linux Enterprise High Performance Computing 15:tomcat-jsp-2_3-api","SUSE Linux Enterprise High Performance Computing 15:tomcat-lib","SUSE Linux Enterprise High Performance Computing 15:tomcat-servlet-4_0-api","SUSE Linux Enterprise High Performance Computing 15:tomcat-webapps","SUSE Linux Enterprise Module for Web and Scripting 15:tomcat","SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-admin-webapps","SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-el-3_0-api","SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-jsp-2_3-api","SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-lib","SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-servlet-4_0-api","SUSE Linux Enterprise Module for Web and Scripting 15:tomcat-webapps","SUSE Linux Enterprise Server 11 SP1 for Teradata:tomcat6","SUSE Linux Enterprise Server 11 SP3 LTSS:tomcat6","SUSE Linux Enterprise Server 11 SP3 for Teradata:tomcat6","SUSE Linux Enterprise Server 11 SP4 LTSS:tomcat6","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-admin-webapps","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-docs-webapp","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-el-3_0-api","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-javadoc","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-lib","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-servlet-3_1-api","SUSE Linux Enterprise Server 12 SP2-LTSS:tomcat-webapps","SUSE Linux Enterprise Server 12 SP3:tomcat","SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps","SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp","SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api","SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc","SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server 12 SP3:tomcat-lib","SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api","SUSE Linux Enterprise Server 12 SP3:tomcat-webapps","SUSE Linux Enterprise Server 12 SP4:tomcat","SUSE Linux Enterprise Server 12 SP4:tomcat-admin-webapps","SUSE Linux Enterprise Server 12 SP4:tomcat-docs-webapp","SUSE Linux Enterprise Server 12 SP4:tomcat-el-3_0-api","SUSE Linux Enterprise Server 12 SP4:tomcat-javadoc","SUSE Linux Enterprise Server 12 SP4:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server 12 SP4:tomcat-lib","SUSE Linux Enterprise Server 12 SP4:tomcat-servlet-4_0-api","SUSE Linux Enterprise Server 12 SP4:tomcat-webapps","SUSE Linux Enterprise Server 12-LTSS:tomcat","SUSE Linux Enterprise Server 12-LTSS:tomcat-admin-webapps","SUSE Linux Enterprise Server 12-LTSS:tomcat-docs-webapp","SUSE Linux Enterprise Server 12-LTSS:tomcat-el-2_2-api","SUSE Linux Enterprise Server 12-LTSS:tomcat-javadoc","SUSE Linux Enterprise Server 12-LTSS:tomcat-jsp-2_2-api","SUSE Linux Enterprise Server 12-LTSS:tomcat-lib","SUSE Linux Enterprise Server 12-LTSS:tomcat-servlet-3_0-api","SUSE Linux Enterprise Server 12-LTSS:tomcat-webapps","SUSE Linux Enterprise Server 15:tomcat","SUSE Linux Enterprise Server 15:tomcat-admin-webapps","SUSE Linux Enterprise Server 15:tomcat-el-3_0-api","SUSE Linux Enterprise Server 15:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server 15:tomcat-lib","SUSE Linux Enterprise Server 15:tomcat-servlet-4_0-api","SUSE Linux Enterprise Server 15:tomcat-webapps","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-admin-webapps","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-docs-webapp","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-el-3_0-api","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-javadoc","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-lib","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-servlet-3_1-api","SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-webapps","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-admin-webapps","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-docs-webapp","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-el-3_0-api","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-javadoc","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-lib","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-servlet-4_0-api","SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-webapps","SUSE Linux Enterprise Server for SAP Applications 12:tomcat","SUSE Linux Enterprise Server for SAP Applications 15:tomcat","SUSE Linux Enterprise Server for SAP Applications 15:tomcat-admin-webapps","SUSE Linux Enterprise Server for SAP Applications 15:tomcat-el-3_0-api","SUSE Linux Enterprise Server for SAP Applications 15:tomcat-jsp-2_3-api","SUSE Linux Enterprise Server for SAP Applications 15:tomcat-lib","SUSE Linux Enterprise Server for SAP Applications 15:tomcat-servlet-4_0-api","SUSE Linux Enterprise Server for SAP Applications 15:tomcat-webapps"]},"references":[{"category":"external","summary":"CVE-2013-2185","url":"https://www.suse.com/security/cve/CVE-2013-2185"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 838671 for CVE-2013-2185","url":"https://bugzilla.suse.com/838671"},{"category":"external","summary":"SUSE Bug 896047 for CVE-2013-2185","url":"https://bugzilla.suse.com/896047"}],"threats":[{"category":"impact","date":"2013-09-03T20:19:56Z","details":"important"}],"title":"CVE-2013-2185"}]}