Red Hat JBoss Community Application Server 5.0.0

CPE Details

Red Hat JBoss Community Application Server 5.0.0
redhat
jboss_community_application_server
5.0.0
2012-08-14
13h27 +00:00
2012-08-14
13h27 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:redhat:jboss_community_application_server:5.0.0:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

jboss_community_application_server

Version

5.0.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2012-4529 2013-10-28 21h00 +00:00 The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.
4.3
CVE-2009-5066 2012-08-13 18h00 +00:00 twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments.
2.1