Red Hat Security Advisory

RHSA-2019:0130

Red Hat JBoss Web Server 3.1 Service Pack 6 security and bug fix update

Released 2019-01-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2018-08441 CVE-2018-11784 · GHSA-5q99-f34m-67gc

HIGH 65

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.9768 Published 2018-10-04 Partial fix · 8.5.34, 7.0.91 +1 CWE-601

TI-2018-05811 CVE-2018-8034 · GHSA-46j3-r4pj-4835

MEDIUM 58

The host name verification when using TLS with the WebSocket client was missing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.21048 Published 2018-08-01 Partial fix · 9.0.10, 8.5.32 +2 CWE-295