Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2020:0861 4 CVEs

Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 8 security update

Published Sep 16, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 52

ReleasePackageFixed in
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat-native 0:1.2.23-21.redhat_21.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat-native-debuginfo 0:1.2.23-21.redhat_21.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-admin-webapps 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-docs-webapp 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-el-2.2-api 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-javadoc 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-jsp-2.2-api 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-jsvc 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-lib 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-log4j 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-selinux 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-servlet-3.0-api 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-webapps 0:7.0.70-38.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-admin-webapps 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-docs-webapp 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-el-2.2-api 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-javadoc 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-jsp-2.3-api 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-jsvc 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-lib 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-log4j 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-selinux 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-servlet-3.1-api 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-webapps 0:8.0.36-42.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat-native 0:1.2.23-21.redhat_21.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat-native-debuginfo 0:1.2.23-21.redhat_21.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-admin-webapps 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-docs-webapp 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-el-2.2-api 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-javadoc 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-jsp-2.2-api 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-jsvc 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-lib 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-log4j 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-selinux 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-servlet-3.0-api 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-webapps 0:7.0.70-38.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-admin-webapps 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-docs-webapp 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-el-2.2-api 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-javadoc 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-jsp-2.3-api 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-jsvc 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-lib 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-log4j 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-selinux 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-servlet-3.1-api 0:8.0.36-42.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-webapps 0:8.0.36-42.ep7.el7

Vulnerabilities 4

  • Critical 9.8
    CVE-2020-1938 Exploited Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Tomcat

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

    Apache Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
    KEV Mar 3, 2022
  • High 7.5
    CVE-2019-17563 EPSS 11%

    In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack

    When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical …

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  • High 7.0
    CVE-2019-12418

    Insufficiently Protected Credentials in Apache Tomcat

    When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  • Medium 6.1
    CVE-2019-0221 Public exploit Scanner template EPSS 58%

    Cross-site scripting in Apache Tomcat

    The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and…

    Apache Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/3.1/html/3.1.0_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1713275
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1785699
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1785711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1806398
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0861.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-0221
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-0221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-0221
  • report
    https://access.redhat.com/security/cve/CVE-2019-12418
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-12418
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-12418
  • article
    http://mail-archives.apache.org/mod_mbox/tomcat-users/201912.mbox/%3C3f42d82c-d9e9-8893-9820-df4e420e5c4e@apache.org%3E
  • article
    http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.49
  • article
    http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.29
  • article
    https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.99
  • report
    https://access.redhat.com/security/cve/CVE-2019-17563
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-17563
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-17563
  • article
    http://mail-archives.apache.org/mod_mbox/www-announce/201912.mbox/%3C21b7a375-7297-581b-1f8e-06622d36775b@apache.org%3E
  • article
    http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.30
  • article
    https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.50
  • report
    https://access.redhat.com/security/cve/CVE-2020-1938
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1938
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1938
  • article
    https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/
  • article
    https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.100
  • article
    https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.51
  • article
    https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.31
  • article
    https://www.cnvd.org.cn/webinfo/show/5415
  • article
    https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog