Red Hat Security Advisory

RHSA-2013:1193

jbossweb security update

Released 2013-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server jbossweb-7.2.0-3.redhat_2.ep6.el5
Red Hat JBoss Enterprise Application Platform 6 for RHEL 6 Server jbossweb-7.2.0-3.redhat_2.ep6.el6

Fixes 1 record

TI-2013-01951 CVE-2013-2185 · GHSA-v6c7-8qx5-8gmp

The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used…

MEDIUM 43

The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07199 Published 2014-01-19 Partial fix · 7.0.39 CWE-20