Dear Dave,
I walk through that years before, too.
Yes - you can't let write different Log4J Appenders to the same file or you get
this garbage.
Yes - you have property resolving here, but there are no properties you need.
We did a solution using an additional servlet called at application ini
On Wed, Oct 3, 2018 at 12:50 PM Mark Thomas wrote:
> CVE-2018-11784 Apache Tomcat - Open Redirect
Is it possible to get more information on the "specially crafted URL"?
I'd like more information so that I can test if some of our apps are
vulnerable.
In addition, I'd like to verify that the valu
Dear Tomcat Users,
Apologies if this is more of a log4j question, but I thought that I'd start
here, in case Tomcat has any easy remedies.
I have a common webapp that I deploy to multiple, different contexts.
In log4j.properties, I have a few different log files defined, e.g., for logins:
log4
Maybe I missed it but what do the Tomcat logs show when you stop and start it?
Also, to further diagnose or get more of the error message you could create a
batch file with this in it and put in a PAUSE to see the error message
net stop "" && net start ""
PAUSE
-Original Message-
From:
Hi Cris,
I had not thought about it, so I also tested this possible solution and it
also solves the problem.
My other test was not conclusive, I carried out the updates of Windows and
that did not change anything, if the service Tomcat starts automatically I
always have the problem.
But I have 2
