Red Hat Security AdvisoryRHSA-2020:2506
Red Hat JBoss Web Server 5.3.1 security update
Released 2020-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Web Server 5.3 for RHEL 6 Server jws5-tomcat-9.0.30-4.redhat_5.1.el6jws, jws5-tomcat-admin-webapps-9.0.30-4.redhat_5.1.el6jws, jws5-tomcat-docs-webapp-9.0.30-4.redhat_5.1.el6jws +8
- Red Hat JBoss Web Server 5.3 for RHEL 7 Server jws5-tomcat-9.0.30-4.redhat_5.1.el7jws, jws5-tomcat-admin-webapps-9.0.30-4.redhat_5.1.el7jws, jws5-tomcat-docs-webapp-9.0.30-4.redhat_5.1.el7jws +8
- Red Hat JBoss Web Server 5.3 for RHEL 8 jws5-tomcat-9.0.30-4.redhat_5.1.el8jws, jws5-tomcat-admin-webapps-9.0.30-4.redhat_5.1.el8jws, jws5-tomcat-docs-webapp-9.0.30-4.redhat_5.1.el8jws +8
Fixes 1 record
Priority HIGH 66
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.5552 · Published 2020-05-20 · Partial fix · 10.0.0-M5, 9.0.35 +2 CWE-502
