Skip to content
OpenAdvisories
Unscored RHSA-2015:1642 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 security update

Published Sep 13, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 mod_cluster-native 0:1.2.9-4.Final_redhat_2.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 mod_jk 0:1.2.40-4.redhat_2.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 mod_jk-ap22 0:1.2.40-4.redhat_2.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el5 mod_jk-manual 0:1.2.40-4.redhat_2.ep6.el5
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 mod_cluster-native 0:1.2.9-4.Final_redhat_2.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 mod_cluster-native-debuginfo 0:1.2.9-4.Final_redhat_2.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 mod_jk 0:1.2.40-4.redhat_2.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 mod_jk-ap22 0:1.2.40-4.redhat_2.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 mod_jk-debuginfo 0:1.2.40-4.redhat_2.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el6 mod_jk-manual 0:1.2.40-4.redhat_2.ep6.el6
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 mod_cluster-native 0:1.2.9-4.Final_redhat_2.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 mod_cluster-native-debuginfo 0:1.2.9-4.Final_redhat_2.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 mod_jk 0:1.2.40-4.redhat_2.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 mod_jk-ap22 0:1.2.40-4.redhat_2.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 mod_jk-debuginfo 0:1.2.40-4.redhat_2.ep6.el7
Red Hat · JBoss Web Server 2 jboss_enterprise_web_server:2::el7 mod_jk-manual 0:1.2.40-4.redhat_2.ep6.el7

Vulnerabilities 2

  • Unscored —
    CVE-2014-8111

    Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which a…

    libapache-mod-jk Debian
  • Unscored —
    CVE-2015-0298

    Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote …

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1182591
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1197769
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1642.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-8111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8111
  • report
    https://access.redhat.com/security/cve/CVE-2015-0298
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0298
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0298