Red Hat Security AdvisoryRHSA-2013:0147
jbossas security update
Released 2013-01-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS jbossas-4.3.0-11.GA_CP10_patch_02.1.ep1.el4, jbossas-client-4.3.0-11.GA_CP10_patch_02.1.ep1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES jbossas-4.3.0-11.GA_CP10_patch_02.1.ep1.el4, jbossas-client-4.3.0-11.GA_CP10_patch_02.1.ep1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server jbossas-4.3.0-11.GA_CP10_patch_02.2.ep1.el5, jbossas-client-4.3.0-11.GA_CP10_patch_02.2.ep1.el5
Fixes 1 record
Priority LOW 34
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.11975 · Published 2012-12-19 · Partial fix · 6.0.36, 7.0.30 CWE-264
