Read the docs
Red Hat Security Advisory

RHSA-2013:0162

JBoss Enterprise SOA Platform 4.2.0.CP05 and 4.3.0.CP05 update

Released 2013-01-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 34

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous s…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.11975 Published 2012-12-19 Partial fix · 6.0.36, 7.0.30 CWE-264