Red Hat Security AdvisoryRHSA-2012:0035
mod_cluster-native security update
Released 2012-01-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server mod_cluster-1.0.10-3.1.GA_CP02.ep5.el5, mod_cluster-demo-1.0.10-3.1.GA_CP02.ep5.el5, mod_cluster-jbossas-1.0.10-3.1.GA_CP02.ep5.el5 +4
- Red Hat JBoss Enterprise Web Server 1 for RHEL 6 Server mod_cluster-1.0.10-3.2.GA_CP02.ep5.el6, mod_cluster-demo-1.0.10-3.2.GA_CP02.ep5.el6, mod_cluster-jbossas-1.0.10-3.2.GA_CP02.ep5.el6 +4
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS mod_cluster-1.0.10-3.GA_CP02.ep5.el4, mod_cluster-demo-1.0.10-3.GA_CP02.ep5.el4, mod_cluster-jbossas-1.0.10-3.GA_CP02.ep5.el4 +4
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES mod_cluster-1.0.10-3.GA_CP02.ep5.el4, mod_cluster-demo-1.0.10-3.GA_CP02.ep5.el4, mod_cluster-jbossas-1.0.10-3.GA_CP02.ep5.el4 +4
Fixes 1 record
Priority LOW 39
mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03141 · Published 2012-01-27 · Fixed CWE-264
