Red Hat Security Advisory

RHSA-2019:0450

Red Hat JBoss Web Server 5.0 Service Pack 2 security and bug fix update

Released 2019-03-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 5.0

Fixes 2 records

TI-2018-05791 CVE-2018-8014 · GHSA-r4x2-3cq5-hqvp

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8…

MEDIUM 61

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.20942 Published 2018-05-16 Partial fix · 9.0.9, 8.5.32 +2 CWE-1188

TI-2018-05811 CVE-2018-8034 · GHSA-46j3-r4pj-4835

Improper certificate validation in Apache Tomcat

MEDIUM 58

The host name verification when using TLS with the WebSocket client was missing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.21048 Published 2018-08-01 Partial fix · 9.0.10, 8.5.32 +2 CWE-295