IBM Security Bulletin: Open Source Apache Tomcat prior to 6.0.42 as used in IBM QRadar Security Information and Event Manager 7.1 MR2, and 7.2.4 is vulnerable to HTTP request smuggling. (CVE-2014-0227)

Apache Tomcat prior to 6.0.43 is vulnerable to HTTP request smuggling. (CVE-2014-0227) CVE(s):   CVE-2014-0227 Affected product(s) and affected version(s): IBM QRadar Security Information and Event...

from IBM Product Security Incident Response Team http://ift.tt/1JRIwP6