All Questions
4 questions
3
votes
2
answers
1k
views
Security Benefits of Reverse Proxying Java / Tomcat WebApps Locally
Conventional wisdom seems to dictate that java applications should always be reverse proxied. It's what I have always done and so has everywhere I have worked at.
I have read multiple times that ...
- 273
1
vote
2
answers
11k
views
Tomcat application arbitrary file read exploitation
In recent black-box pen-test of a webapp hosted on CentOS, I found a vulnerability that allowed me to grab contents of files (kind of file inclusion) located within the home path of Tomcat.
In ...
- 11
0
votes
1
answer
591
views
Access encrypted files (dm-crypt/LUKS) through web app
I'm a newbie to encryption issues and I'm trying to sort out a few questions.
For a distributed application we need to deploy a server outside of our company with sensitives PDF files on it. That ...
- 103
1
vote
3
answers
1k
views
Is it necessary to update JRE in an Apache Tomcat Server?
We have a Java web application contained in an apache tomcat instance. JRE version is 7.0.51 and Tomcat version is 7.0.42.
Users have expressed their concerns about Java 7's support/updates being ...
- 111