I have default installation of Apache Tomcat that Comes with the Busines Objects Installation i.e. Tomcat 5.5.20. There are some vulnerabilities that are there with that version which may compromise the data security. There are some CVE for Tomcat I can List Below:
CVE-2009-0580
CVE-2009-0783
For this reason I need to upgrade my Tomcat Installation.
Can somebody suggest How can I apply a FIX or upgrade.
The best thing you can do is, contact BO support, they will send you authentic steps to do so, and help you in sorting the issues surfaced during upgrades. Else you can try with these links. It helped us past when we upgraded 5.2.20
Deepak Thanks for Useful links, Those helped, I have deployed application to the Tomcat 6 and I am able to log into CMC and Infoview. But the problem I am facing now is It shows up http: 404 page missing when I try to open a page in Infoview.
Can you detail me the steps you have followed to upgrade the Tomcat server, I will try my best to analyze what might have missed, it seems something missing with .WAR or JAR files. Let me try to figure out what went wrong and where.
Installed BO XI 3.1 with its default Tomcat and MySQL Installation.
Installed an BO XI 3.1 SP3 Update.
Installed Tomcat 6.0.24 by running the exe provided by Apache site.
Copied the XML files from tomcat55/conf/catalina/localhost to Tomcat 6/conf/catalina/localhost. (There was no Catalina folder inside the conf of tomcat 6 version so I had to create it and then copied those XML files.)
copied the Bobjsetup folder from tomcat55 to tomcat 6 installation.
disabled the service for tomcat55 and started the service for tomcat6.
.NET INFOVIEW is also not working, I am logging into Java Infoview with admin privileges.
After that all the applications opened using tomcat6 including CMC, Infoview. Infoview is also listing the reports that are there, when I imported the BIAR file, but when I try to open these, they pop the error 404: page not found.
Sample crystal reports that come with the installation are opening, URL is also opening but WEBI is not.