CVE Vulnerabilities

CVE-2018-8034

Improper Certificate Validation

Published: Aug 01, 2018 | Modified: Dec 08, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
4.3 LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Ubuntu
LOW

The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Tomcat Apache 7.0.35 (including) 7.0.88 (including)
Tomcat Apache 8.0.0 (including) 8.0.52 (including)
Tomcat Apache 8.5.0 (including) 8.5.31 (including)
Tomcat Apache 9.0.1 (including) 9.0.9 (including)
Tomcat Apache 8.0.0-rc1 (including) 8.0.0-rc1 (including)
Tomcat Apache 8.0.0-rc10 (including) 8.0.0-rc10 (including)
Tomcat Apache 8.0.0-rc2 (including) 8.0.0-rc2 (including)
Tomcat Apache 8.0.0-rc3 (including) 8.0.0-rc3 (including)
Tomcat Apache 8.0.0-rc4 (including) 8.0.0-rc4 (including)
Tomcat Apache 8.0.0-rc5 (including) 8.0.0-rc5 (including)
Tomcat Apache 8.0.0-rc6 (including) 8.0.0-rc6 (including)
Tomcat Apache 8.0.0-rc7 (including) 8.0.0-rc7 (including)
Tomcat Apache 8.0.0-rc8 (including) 8.0.0-rc8 (including)
Tomcat Apache 8.0.0-rc9 (including) 8.0.0-rc9 (including)
Tomcat Apache 9.0.0-milestone1 (including) 9.0.0-milestone1 (including)
Tomcat Apache 9.0.0-milestone10 (including) 9.0.0-milestone10 (including)
Tomcat Apache 9.0.0-milestone11 (including) 9.0.0-milestone11 (including)
Tomcat Apache 9.0.0-milestone12 (including) 9.0.0-milestone12 (including)
Tomcat Apache 9.0.0-milestone13 (including) 9.0.0-milestone13 (including)
Tomcat Apache 9.0.0-milestone14 (including) 9.0.0-milestone14 (including)
Tomcat Apache 9.0.0-milestone15 (including) 9.0.0-milestone15 (including)
Tomcat Apache 9.0.0-milestone16 (including) 9.0.0-milestone16 (including)
Tomcat Apache 9.0.0-milestone17 (including) 9.0.0-milestone17 (including)
Tomcat Apache 9.0.0-milestone18 (including) 9.0.0-milestone18 (including)
Tomcat Apache 9.0.0-milestone19 (including) 9.0.0-milestone19 (including)
Tomcat Apache 9.0.0-milestone2 (including) 9.0.0-milestone2 (including)
Tomcat Apache 9.0.0-milestone20 (including) 9.0.0-milestone20 (including)
Tomcat Apache 9.0.0-milestone21 (including) 9.0.0-milestone21 (including)
Tomcat Apache 9.0.0-milestone22 (including) 9.0.0-milestone22 (including)
Tomcat Apache 9.0.0-milestone23 (including) 9.0.0-milestone23 (including)
Tomcat Apache 9.0.0-milestone24 (including) 9.0.0-milestone24 (including)
Tomcat Apache 9.0.0-milestone25 (including) 9.0.0-milestone25 (including)
Tomcat Apache 9.0.0-milestone26 (including) 9.0.0-milestone26 (including)
Tomcat Apache 9.0.0-milestone27 (including) 9.0.0-milestone27 (including)
Tomcat Apache 9.0.0-milestone3 (including) 9.0.0-milestone3 (including)
Tomcat Apache 9.0.0-milestone4 (including) 9.0.0-milestone4 (including)
Tomcat Apache 9.0.0-milestone5 (including) 9.0.0-milestone5 (including)
Tomcat Apache 9.0.0-milestone6 (including) 9.0.0-milestone6 (including)
Tomcat Apache 9.0.0-milestone7 (including) 9.0.0-milestone7 (including)
Tomcat Apache 9.0.0-milestone8 (including) 9.0.0-milestone8 (including)
Tomcat Apache 9.0.0-milestone9 (including) 9.0.0-milestone9 (including)
Red Hat Enterprise Linux 7 RedHat tomcat-0:7.0.76-9.el7 *
Red Hat Enterprise Linux 8 RedHat pki-deps:10.6-8000020190524054914.55190bc5 *
Red Hat Fuse 7.5.0 RedHat tomcat *
Red Hat JBoss Enterprise Application Platform 6.4 RedHat jbossweb *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat apache-cxf-0:2.7.18-8.SP7_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat dom4j-eap6-0:1.6.1-22.redhat_9.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat hornetq-0:2.3.25-28.SP29_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat ironjacamar-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-appclient-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-appclient-0:7.5.22-2.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-bundles-0:7.5.22-2.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-cli-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-client-all-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-clustering-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-cmp-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-connector-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-console-0:2.5.19-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-controller-client-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-core-0:7.5.22-2.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-core-security-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-deployment-repository-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-deployment-scanner-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-domain-0:7.5.22-2.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-domain-http-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-domain-management-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-ee-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-ee-deployment-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-ejb3-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-embedded-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-host-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jacorb-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-javadocs-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jaxr-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jaxrs-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jdr-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jmx-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jpa-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jsf-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jsr77-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-logging-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-mail-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-management-client-content-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-messaging-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-modcluster-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-modules-eap-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-naming-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-network-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-osgi-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-osgi-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-osgi-service-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-picketlink-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-platform-mbean-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-pojo-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-process-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-product-eap-0:7.5.22-2.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-protocol-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-remoting-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-sar-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-security-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-server-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-standalone-0:7.5.22-2.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-system-jmx-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-threads-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-transactions-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-version-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-web-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-webservices-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-welcome-content-eap-0:7.5.22-2.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-weld-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-xts-0:7.5.22-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-hal-0:2.5.19-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-remote-naming-0:1.0.15-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat resteasy-0:2.3.23-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat apache-cxf-0:2.7.18-8.SP7_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat dom4j-eap6-0:1.6.1-22.redhat_9.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat hornetq-0:2.3.25-28.SP29_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat ironjacamar-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-appclient-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-appclient-0:7.5.22-2.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-bundles-0:7.5.22-2.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-cli-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-client-all-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-clustering-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-cmp-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-connector-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-console-0:2.5.19-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-controller-client-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-core-0:7.5.22-2.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-core-security-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-deployment-repository-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-deployment-scanner-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-domain-0:7.5.22-2.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-domain-http-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-domain-management-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-ee-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-ee-deployment-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-ejb3-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-embedded-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-host-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jacorb-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-javadocs-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jaxr-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jaxrs-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jdr-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jmx-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jpa-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jsf-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jsr77-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-logging-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-mail-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-management-client-content-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-messaging-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-modcluster-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-modules-eap-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-naming-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-network-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-osgi-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-osgi-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-osgi-service-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-picketlink-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-platform-mbean-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-pojo-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-process-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-product-eap-0:7.5.22-2.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-protocol-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-remoting-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-sar-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-security-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-server-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-standalone-0:7.5.22-2.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-system-jmx-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-threads-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-transactions-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-version-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-web-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-webservices-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-welcome-content-eap-0:7.5.22-2.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-weld-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-xts-0:7.5.22-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-hal-0:2.5.19-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-remote-naming-0:1.0.15-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat resteasy-0:2.3.23-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat apache-cxf-0:2.7.18-8.SP7_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat dom4j-eap6-0:1.6.1-22.redhat_9.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat hornetq-0:2.3.25-28.SP29_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat ironjacamar-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-appclient-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-appclient-0:7.5.22-2.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-bundles-0:7.5.22-2.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-cli-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-client-all-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-clustering-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-cmp-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-connector-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-console-0:2.5.19-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-controller-client-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-core-0:7.5.22-2.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-core-security-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-deployment-repository-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-deployment-scanner-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-domain-0:7.5.22-2.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-domain-http-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-domain-management-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-ee-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-ee-deployment-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-ejb3-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-embedded-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-host-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jacorb-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-javadocs-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jaxr-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jaxrs-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jdr-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jmx-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jpa-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jsf-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jsr77-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-logging-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-mail-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-management-client-content-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-messaging-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-modcluster-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-modules-eap-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-naming-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-network-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-osgi-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-osgi-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-osgi-service-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-picketlink-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-platform-mbean-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-pojo-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-process-controller-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-product-eap-0:7.5.22-2.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-protocol-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-remoting-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-sar-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-security-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-server-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-standalone-0:7.5.22-2.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-system-jmx-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-threads-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-transactions-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-version-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-web-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-webservices-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-welcome-content-eap-0:7.5.22-2.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-weld-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-xts-0:7.5.22-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-hal-0:2.5.19-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-remote-naming-0:1.0.15-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat resteasy-0:2.3.23-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Web Server 3.1 RedHat tomcat7 *
Red Hat JBoss Web Server 3.1 RedHat tomcat8 *
Red Hat JBoss Web Server 3 for RHEL 6 RedHat tomcat7-0:7.0.70-31.ep7.el6 *
Red Hat JBoss Web Server 3 for RHEL 6 RedHat tomcat8-0:8.0.36-35.ep7.el6 *
Red Hat JBoss Web Server 3 for RHEL 6 RedHat tomcat-native-0:1.2.17-18.redhat_18.ep7.el6 *
Red Hat JBoss Web Server 3 for RHEL 7 RedHat tomcat7-0:7.0.70-31.ep7.el7 *
Red Hat JBoss Web Server 3 for RHEL 7 RedHat tomcat8-0:8.0.36-35.ep7.el7 *
Red Hat JBoss Web Server 3 for RHEL 7 RedHat tomcat-native-0:1.2.17-18.redhat_18.ep7.el7 *
Red Hat JBoss Web Server 5.0 RedHat tomcat *
Red Hat JBoss Web Server 5.0 on RHEL 6 RedHat jws5-ecj-0:4.6.1-6.redhat_1.1.el6jws *
Red Hat JBoss Web Server 5.0 on RHEL 6 RedHat jws5-javapackages-tools-0:3.4.1-5.15.10.el6jws *
Red Hat JBoss Web Server 5.0 on RHEL 6 RedHat jws5-jboss-logging-0:3.3.1-5.Final_redhat_1.1.el6jws *
Red Hat JBoss Web Server 5.0 on RHEL 6 RedHat jws5-mod_cluster-0:1.4.0-9.Final_redhat_1.1.el6jws *
Red Hat JBoss Web Server 5.0 on RHEL 6 RedHat jws5-tomcat-0:9.0.7-17.redhat_16.1.el6jws *
Red Hat JBoss Web Server 5.0 on RHEL 6 RedHat jws5-tomcat-native-0:1.2.17-26.redhat_26.el6jws *
Red Hat JBoss Web Server 5.0 on RHEL 6 RedHat jws5-tomcat-vault-0:1.1.7-5.Final_redhat_2.1.el6jws *
Red Hat JBoss Web Server 5.0 on RHEL 7 RedHat jws5-ecj-0:4.6.1-6.redhat_1.1.el7jws *
Red Hat JBoss Web Server 5.0 on RHEL 7 RedHat jws5-javapackages-tools-0:3.4.1-5.15.10.el7jws *
Red Hat JBoss Web Server 5.0 on RHEL 7 RedHat jws5-jboss-logging-0:3.3.1-5.Final_redhat_1.1.el7jws *
Red Hat JBoss Web Server 5.0 on RHEL 7 RedHat jws5-mod_cluster-0:1.4.0-9.Final_redhat_1.1.el7jws *
Red Hat JBoss Web Server 5.0 on RHEL 7 RedHat jws5-tomcat-0:9.0.7-17.redhat_16.1.el7jws *
Red Hat JBoss Web Server 5.0 on RHEL 7 RedHat jws5-tomcat-native-0:1.2.17-26.redhat_26.el7jws *
Red Hat JBoss Web Server 5.0 on RHEL 7 RedHat jws5-tomcat-vault-0:1.1.7-5.Final_redhat_2.1.el7jws *
Tomcat7 Ubuntu esm-apps/xenial *
Tomcat7 Ubuntu trusty *
Tomcat7 Ubuntu upstream *
Tomcat7 Ubuntu xenial *
Tomcat8 Ubuntu bionic *
Tomcat8 Ubuntu upstream *
Tomcat8 Ubuntu xenial *
Tomcat8.0 Ubuntu upstream *

Potential Mitigations

References