Red Hat Security Advisory

RHSA-2024:4976

Red Hat JBoss Web Server 6.0.3 release and security update

Released 2024-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 6.0 for RHEL 8 jws6-tomcat-10.1.8-10.redhat_00018.1.el8jws, jws6-tomcat-admin-webapps-10.1.8-10.redhat_00018.1.el8jws, jws6-tomcat-docs-webapp-10.1.8-10.redhat_00018.1.el8jws +7
Red Hat JBoss Web Server 6.0 for RHEL 9 jws6-tomcat-10.1.8-10.redhat_00018.1.el9jws, jws6-tomcat-admin-webapps-10.1.8-10.redhat_00018.1.el9jws, jws6-tomcat-docs-webapp-10.1.8-10.redhat_00018.1.el9jws +7

TI-2024-25564 CVE-2024-38286 · GHSA-7jqf-v358-p8g7

MEDIUM 47

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0169 Published 2024-11-07 Partial fix · 11.0.0-M21, 10.1.25 +1 CWE-770

TI-2024-23041 CVE-2024-34750 · GHSA-wm9w-rjj3-j356

MEDIUM 46

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04602 Published 2024-07-03 Partial fix · 11.0.0-M21, 10.1.25 +1 CWE-400