Suppress CVE-2019-17563

2020-01-03 23:48:52 +01:00
parent 70de4c8f25
commit fa1fbb49dc
1 changed files with 5 additions and 0 deletions
@@ -205,4 +205,9 @@
        <gav regex="true">.*jackson-databind.*</gav>
        <cve>CVE-2019-12384</cve>
    </suppress>
+    <suppress>
+        <notes>We do not use FORM-based authentication in Tomcat</notes>
+        <gav regex="true">org.apache.tomcat.embed.*</gav>
+        <cve>CVE-2019-17563</cve>
+    </suppress>
 </suppressions>