FW: Re: Question regarding mitigating the CVE-2017-12617 vulnerability

2019-02-13 Thread Adams, Michael
Christopher, Thanks for your input. It was very helpful. This afternoon, my InfoSecurity technician who runs the Tripwire app believes Apache Tomcat vs 8.5.13 is being flagged for the CVE-2017-12617 vulnerability solely off of the version. Tripwire isn't trying to see if HTTP PUT is enabled

FW: Re: Question regarding mitigating the CVE-2017-12617 vulnerability

2019-02-13 Thread Adams, Michael
Mark, Thanks for your input. It was very helpful. My InfoSecurity technician who runs the Tripwire app believes Apache Tomcat vs 8.5.13 is being flagged for the CVE-2017-12617 vulnerability solely off of the version. Tripwire isn't trying to see if HTTP PUT is enabled. He is opening a fals