Red Hat Security AdvisoryRHSA-2012:1053
mod_cluster security update
Released 2012-07-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Platform 5 for RHEL 5 Server mod_cluster-1.0.10-4.1.GA_CP02_patch01.ep5.el5, mod_cluster-demo-1.0.10-4.1.GA_CP02_patch01.ep5.el5, mod_cluster-jbossas-1.0.10-4.1.GA_CP02_patch01.ep5.el5 +2
- Red Hat JBoss Web Platform 5 for RHEL 6 Server mod_cluster-1.0.10-4.1.GA_CP02_patch01.ep5.el6, mod_cluster-demo-1.0.10-4.1.GA_CP02_patch01.ep5.el6, mod_cluster-jbossas-1.0.10-4.1.GA_CP02_patch01.ep5.el6 +2
Fixes 1 record
Priority LOW 25
mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote at…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02592 · Published 2012-10-22 · Fixed in 1.1.4 CWE-264
