Red Hat Security AdvisoryRHSA-2007:0950
JBoss Enterprise Application Platform security update
Released 2007-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Application Stack v1 for Enterprise Linux AS (v.4) berkeleydb-2.0.90-1jpp.ep1.1, hibernate3-annotations-3.2.1-1.patch01.1jpp.ep1.2, hibernate3-annotations-javadoc-3.2.1-1.patch01.1jpp.ep1.2 +17
- Red Hat Application Stack v1 for Enterprise Linux ES (v.4) berkeleydb-2.0.90-1jpp.ep1.1, hibernate3-annotations-3.2.1-1.patch01.1jpp.ep1.2, hibernate3-annotations-javadoc-3.2.1-1.patch01.1jpp.ep1.2 +17
Fixes 2 records
Priority MEDIUM 47
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be le…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.37497 · Published 2007-08-14 · Fixed CWE-200
Priority LOW 37
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as ses…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.16944 · Published 2007-08-14 · Fixed CWE-200
