Skip to content
OpenAdvisories
Unscored RHSA-2015:1622 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 tomcat security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 66

ReleasePackageFixed in
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-admin-webapps 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-docs-webapp 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-el-2.1-api 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-javadoc 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-jsp-2.1-api 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-lib 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-log4j 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-maven-devel 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-servlet-2.5-api 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat6-webapps 0:6.0.41-15_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-admin-webapps 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-docs-webapp 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-el-2.2-api 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-javadoc 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-jsp-2.2-api 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-lib 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-log4j 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-maven-devel 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-servlet-3.0-api 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 tomcat7-webapps 0:7.0.54-19_patch_04.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-admin-webapps 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-docs-webapp 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-el-2.1-api 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-javadoc 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-jsp-2.1-api 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-lib 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-log4j 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-maven-devel 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-servlet-2.5-api 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat6-webapps 0:6.0.41-15_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-admin-webapps 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-docs-webapp 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-el-2.2-api 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-javadoc 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-jsp-2.2-api 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-lib 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-log4j 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-maven-devel 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-servlet-3.0-api 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 tomcat7-webapps 0:7.0.54-19_patch_04.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-admin-webapps 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-docs-webapp 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-el-2.1-api 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-javadoc 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-jsp-2.1-api 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-lib 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-log4j 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-maven-devel 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-servlet-2.5-api 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat6-webapps 0:6.0.41-15_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-admin-webapps 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-docs-webapp 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-el-2.2-api 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-javadoc 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-jsp-2.2-api 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-lib 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-log4j 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-maven-devel 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-servlet-3.0-api 0:7.0.54-20_patch_04.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 tomcat7-webapps 0:7.0.54-20_patch_04.ep6.el7

Vulnerabilities 2

  • High —
    CVE-2014-0230 EPSS 20%

    Uncontrolled Resource Consumption in Apache Tomcat

    Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread co…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven
  • Medium —
    CVE-2014-7810 EPSS 13%

    Improper Access Control in Apache Tomcat

    The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypa…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1191200
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222573
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1622.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0230
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0230
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0230
  • article
    http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44
  • article
    http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55
  • article
    http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.9
  • report
    https://access.redhat.com/security/cve/CVE-2014-7810
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7810
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7810
  • article
    http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.59
  • article
    http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.17