Description
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | JBoss AS 7 | prior to 7.1.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jboss.as:jboss-as-server | >= 7.0.0.Alpha1, < 7.1.1.Final | 7.1.1.Final | GHSA-wq8g-hm94-5rqq |