Red Hat Security Advisory

RHSA-2025:0342

Red Hat JBoss Web Server 6.0.5 release and security update

Released 2025-01-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 6.0 for RHEL 8 jws6-tomcat-10.1.8-15.redhat_00022.1.el8jws, jws6-tomcat-admin-webapps-10.1.8-15.redhat_00022.1.el8jws, jws6-tomcat-docs-webapp-10.1.8-15.redhat_00022.1.el8jws +7
Red Hat JBoss Web Server 6.0 for RHEL 9 jws6-tomcat-10.1.8-15.redhat_00022.1.el9jws, jws6-tomcat-admin-webapps-10.1.8-15.redhat_00022.1.el9jws, jws6-tomcat-docs-webapp-10.1.8-15.redhat_00022.1.el9jws +7

Fixes 1 record

TI-2024-33814 CVE-2024-50379 · GHSA-5j33-cvvr-w245

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

HIGH 82

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configura…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.31824 Published 2024-12-17 Partial fix · 11.0.2, 10.1.34 +1 CWE-367