Red Hat Security Advisory

RHSA-2019:1712

Red Hat JBoss Web Server 3.1 Service Pack 7 security and bug fix update

Released 2019-07-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 3.1

Fixes 2 records

TI-2019-00205 CVE-2019-0232 · GHSA-8vmx-qmch-mpqg

OS command injection in Apache Tomcat

HIGH 82

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.99923 Published 2019-04-15 Partial fix · 9.0.17, 8.5.40 +1 CWE-78

TI-2018-00685 CVE-2018-0739 · GHSA-2qcx-c97v-hcr6

Constructed ASN.1 types with a recursive definition could exceed the stack

MEDIUM 47

Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.18596 Published 2018-03-27 Partial fix CWE-674