Read the docs
Red Hat Security Advisory

RHSA-2015:1010

Red Hat JBoss Portal 6.2.0 security update

Released 2015-05-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 38

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09152 Published 2014-08-27 Partial fix CWE-297