Is IdM/IPA or RHCS affected by Tomcat vulnerability CVE-2023-24998 or CVE-2023-28708?
Issue
- Red Hat engineering has investigated two CVE's (
CVE-2023-24998andCVE-2023-28708) potentially affecting Red Hat Identity Management/IPA and Red Hat Certificate system.
Environment
- Red Hat Enterprise Linux 7, 8, and 9
- Red Hat Certificate System 9 and 10
- Identity Management (IPA)
- Apache Tomcat for IdM or RHCS
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.