Read the docs
Red Hat Security Advisory

RHSA-2013:1265

jbossweb security update

Released 2013-09-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 43

The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07199 Published 2014-01-19 Partial fix · 7.0.39 CWE-20