Read the docs
Red Hat Security Advisory

RHSA-2020:1478

Red Hat JBoss Enterprise Application Platform 6.4 security update

Released 2020-04-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority CRITICAL 100KEV

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9927 Published 2020-02-24 Partial fix · 9.0.31, 8.5.51 +1 CWE-269