Red Hat JBoss Community Application Server 7.1.1

CPE Details

Red Hat JBoss Community Application Server 7.1.1
redhat
jboss_community_application_server
7.1.1
2013-10-29
12h20 +00:00
2013-10-29
13h28 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:redhat:jboss_community_application_server:7.1.1:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

jboss_community_application_server

Version

7.1.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2012-2148 2019-12-06 16h35 +00:00 An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies
3.3
Low
CVE-2012-4529 2013-10-28 21h00 +00:00 The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.
4.3