Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.0 enhancement update
Updated Red Hat JBoss Web Server 3.0.0 packages are now available for Red Hat Enterprise Linux 6 and 7, Solaris, and Microsoft Windows.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-0298US | medium4.3 | — | ||
Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafte… | ||||
| CVE-2015-0204US | medium4.3 | Exploit | ||
The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downg… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- FixedRed Hat JBoss Web Server 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied and back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2015:0955 - FixedRed Hat JBoss Web Server 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied and back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHEA-2015:0955
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan