Skip to content
OpenAdvisories
Unscored RHSA-2010:0584 2 CVEs

Red Hat Security Advisory: jbossweb security update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossweb 0:2.0.0-6.CP14.0jpp.ep1.1.el5

Vulnerabilities 2

  • Medium —
    CVE-2010-1157 Public exploit EPSS 53%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2010-2227 Public exploit EPSS 55%

    Apache Tomcat does not properly handle an invalid Transfer-Encoding header

    Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafte…

    org.apache.tomcat:tomcat Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://tomcat.apache.org/security-6.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=585331
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=612799
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0584.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-1157
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1157
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1157
  • report
    https://access.redhat.com/security/cve/CVE-2010-2227
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2227
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2227