Skip to content
OpenAdvisories

Package · Maven

org.jboss.mod_cluster:mod_cluster

1 known vulnerabilities.

1 result · Feed

  • Medium —

    Improper Access Control in JBoss mod_cluster

    mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions a…