Red Hat Security AdvisoryRHSA-2010:0119
JBoss Enterprise Web Server 1.0.1 update
Released 2010-02-23 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server glassfish-jsf-1.2_13-3.ep5.el5, httpd-2.2.14-1.2.1.ep5.el5, httpd-2.2.14-1.2.1.ep5.el5.i386 +40
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS glassfish-jsf-1.2_13-2.ep5.el4, httpd22-2.2.14-4.ep5.el4, httpd22-2.2.14-4.ep5.el4.i386 +47
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES glassfish-jsf-1.2_13-2.ep5.el4, httpd22-2.2.14-4.ep5.el4, httpd22-2.2.14-4.ep5.el4.i386 +47
Fixes 4 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority LOW 38
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a ..
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09638 · Published 2010-01-28 · Fixed in 5.5.29, 6.0.24 CWE-22
Priority LOW 33
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10741 · Published 2010-01-28 · Fixed in 5.5.29, 6.0.24 CWE-22
Priority LOW 23
Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS)…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.02118 · Published 2010-05-27 · Fixed CWE-79
THREATIST.IORead the docs