Read the docs
Red Hat Security Advisory

RHSA-2018:2867

Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update

Released 2018-10-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

TI-2018-08441 CVE-2018-11784 · GHSA-5q99-f34m-67gc

Open redirect in Apache Tomcat

Priority HIGH 65

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.9768 Published 2018-10-04 Partial fix · 8.5.34, 7.0.91 +1 CWE-601
TI-2018-05814 CVE-2018-8037 · GHSA-6v52-mj5r-7j2m

Race condition in Apache Tomcat

Priority MEDIUM 40

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.11156 Published 2018-08-02 Partial fix · 9.0.10, 8.5.32 CWE-362