Red Hat Security AdvisoryRHSA-2012:1166
mod_cluster security update
Released 2012-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server mod_cluster-1.0.10-4.1.GA_CP02_patch01.ep5.el5, mod_cluster-demo-1.0.10-4.1.GA_CP02_patch01.ep5.el5, mod_cluster-jbossas-1.0.10-4.1.GA_CP02_patch01.ep5.el5 +2
- Red Hat JBoss Enterprise Web Server 1 for RHEL 6 Server mod_cluster-1.0.10-4.1.GA_CP02_patch01.ep5.el6, mod_cluster-demo-1.0.10-4.1.GA_CP02_patch01.ep5.el6, mod_cluster-jbossas-1.0.10-4.1.GA_CP02_patch01.ep5.el6 +2
Fixes 1 record
Priority LOW 25
mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote at…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02592 · Published 2012-10-22 · Fixed in 1.1.4 CWE-264
