Red Hat Security AdvisoryRHSA-2012:1052
mod_cluster security update
Released 2012-07-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS mod_cluster-1.0.10-4.GA_CP02_patch01.ep5.el4, mod_cluster-demo-1.0.10-4.GA_CP02_patch01.ep5.el4, mod_cluster-jbossas-1.0.10-4.GA_CP02_patch01.ep5.el4 +2
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES mod_cluster-1.0.10-4.GA_CP02_patch01.ep5.el4, mod_cluster-demo-1.0.10-4.GA_CP02_patch01.ep5.el4, mod_cluster-jbossas-1.0.10-4.GA_CP02_patch01.ep5.el4 +2
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server mod_cluster-1.0.10-4.1.GA_CP02_patch01.ep5.el5, mod_cluster-demo-1.0.10-4.1.GA_CP02_patch01.ep5.el5, mod_cluster-jbossas-1.0.10-4.1.GA_CP02_patch01.ep5.el5 +2
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server mod_cluster-1.0.10-4.1.GA_CP02_patch01.ep5.el6, mod_cluster-demo-1.0.10-4.1.GA_CP02_patch01.ep5.el6, mod_cluster-jbossas-1.0.10-4.1.GA_CP02_patch01.ep5.el6 +2
Fixes 1 record
Priority LOW 25
mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote at…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02592 · Published 2012-10-22 · Fixed in 1.1.4 CWE-264
