Red Hat Security Advisory

RHSA-2022:8917

Red Hat JBoss Web Server 5.7.1 release and security update

Released 2022-12-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 5.7 for RHEL 7 Server jws5-tomcat-native-1.2.31-11.redhat_11.el7jws
Red Hat JBoss Web Server 5.7 for RHEL 8 jws5-tomcat-native-1.2.31-11.redhat_11.el8jws
Red Hat JBoss Web Server 5.7 for RHEL 9 jws5-tomcat-native-1.2.31-11.redhat_11.el9jws

Fixes 2 records

TI-2022-01915 CVE-2022-2068 · GHSA-xjxr-x4h8-946x

The c_rehash script allows command injection

CRITICAL 93

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96391 Published 2022-06-21 Partial fix CWE-78

TI-2022-01176 CVE-2022-1292 · GHSA-qjmp-vmxc-7p8r

The c_rehash script allows command injection

CRITICAL 90

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82612 Published 2022-05-03 Partial fix CWE-78