Skip to content
OpenAdvisories
Unscored RHSA-2013:1193 1 CVE

Red Hat Security Advisory: jbossweb security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossweb 0:7.2.0-3.redhat_2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossweb 0:7.2.0-3.redhat_2.ep6.el6

Vulnerabilities 1

  • High —
    CVE-2013-2185

    Deserialization of Untrusted Data in Apache Tomcat

    The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name i…

    org.apache.tomcat:tomcat Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=974813
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1193.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2185
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2185
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2185