CVE Vulnerabilities

CVE-2020-1938

Published: Feb 24, 2020 | Modified: Nov 07, 2023
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
7.6 IMPORTANT
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Ubuntu
LOW

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.

Affected Software

Name Vendor Start Version End Version
Geode Apache 1.12.0 (including) 1.12.0 (including)
Tomcat Apache 7.0.0 (including) 7.0.99 (including)
Tomcat Apache 8.5.0 (including) 8.5.50 (including)
Tomcat Apache 9.0.0 (including) 9.0.30 (including)
Red Hat Enterprise Linux 6 RedHat tomcat6-0:6.0.24-114.el6_10 *
Red Hat Enterprise Linux 7 RedHat tomcat-0:7.0.76-11.el7_7 *
Red Hat Enterprise Linux 7.6 Extended Update Support RedHat tomcat-0:7.0.76-10.el7_6 *
Red Hat Enterprise Linux 8 RedHat pki-core:10.6-8030020200911215836.5ff1562f *
Red Hat Enterprise Linux 8 RedHat pki-deps:10.6-8030020200527165326.30b713e6 *
Red Hat Fuse 7.9 RedHat tomcat *
Red Hat JBoss Enterprise Application Platform 6.4 RedHat jbossweb *
Red Hat JBoss Enterprise Application Platform 6.4 RedHat jbossweb *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat glassfish-jsf12-eap6-0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat hornetq-0:2.3.25-29.SP31_redhat_00001.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat ironjacamar-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbosgi-repository-0:2.1.0-3.Final_redhat_3.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-appclient-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-appclient-0:7.5.23-4.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-bundles-0:7.5.23-4.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-cli-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-client-all-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-clustering-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-cmp-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-connector-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-controller-client-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-core-0:7.5.23-4.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-core-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-deployment-repository-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-deployment-scanner-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-domain-0:7.5.23-4.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-domain-http-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-domain-management-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-ee-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-ee-deployment-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-ejb3-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-embedded-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-host-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jacorb-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-javadocs-0:7.5.23-2.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jaxr-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jaxrs-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jdr-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jpa-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jsf-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-jsr77-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-logging-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-mail-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-management-client-content-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-messaging-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-modcluster-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-modules-eap-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-naming-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-network-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-osgi-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-osgi-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-osgi-service-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-picketlink-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-platform-mbean-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-pojo-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-process-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-product-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-protocol-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-remoting-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-sar-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-server-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-standalone-0:7.5.23-4.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-system-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-threads-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-transactions-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-version-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-web-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-webservices-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossas-welcome-content-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-weld-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-as-xts-0:7.5.23-3.Final_redhat_00002.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jboss-remoting3-jmx-0:1.1.4-2.Final_redhat_00001.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat jbossweb-0:7.5.31-1.Final_redhat_1.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 RedHat weld-core-0:1.1.34-2.Final_redhat_2.1.ep6.el5 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat glassfish-jsf12-eap6-0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat hornetq-0:2.3.25-29.SP31_redhat_00001.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat ironjacamar-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbosgi-repository-0:2.1.0-3.Final_redhat_3.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-appclient-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-appclient-0:7.5.23-4.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-bundles-0:7.5.23-4.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-cli-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-client-all-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-clustering-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-cmp-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-connector-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-controller-client-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-core-0:7.5.23-4.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-core-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-deployment-repository-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-deployment-scanner-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-domain-0:7.5.23-4.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-domain-http-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-domain-management-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-ee-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-ee-deployment-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-ejb3-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-embedded-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-host-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jacorb-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-javadocs-0:7.5.23-2.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jaxr-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jaxrs-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jdr-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jpa-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jsf-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-jsr77-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-logging-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-mail-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-management-client-content-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-messaging-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-modcluster-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-modules-eap-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-naming-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-network-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-osgi-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-osgi-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-osgi-service-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-picketlink-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-platform-mbean-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-pojo-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-process-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-product-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-protocol-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-remoting-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-sar-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-server-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-standalone-0:7.5.23-4.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-system-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-threads-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-transactions-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-version-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-web-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-webservices-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossas-welcome-content-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-weld-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-as-xts-0:7.5.23-3.Final_redhat_00002.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jboss-remoting3-jmx-0:1.1.4-2.Final_redhat_00001.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat jbossweb-0:7.5.31-1.Final_redhat_1.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 RedHat weld-core-0:1.1.34-2.Final_redhat_2.1.ep6.el6 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat glassfish-jsf12-eap6-0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat hornetq-0:2.3.25-29.SP31_redhat_00001.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat ironjacamar-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbosgi-repository-0:2.1.0-3.Final_redhat_3.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-appclient-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-appclient-0:7.5.23-4.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-bundles-0:7.5.23-4.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-cli-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-client-all-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-clustering-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-cmp-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-connector-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-controller-client-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-core-0:7.5.23-4.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-core-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-deployment-repository-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-deployment-scanner-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-domain-0:7.5.23-4.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-domain-http-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-domain-management-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-ee-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-ee-deployment-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-ejb3-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-embedded-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-host-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jacorb-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-javadocs-0:7.5.23-2.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jaxr-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jaxrs-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jdr-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jpa-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jsf-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-jsr77-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-logging-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-mail-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-management-client-content-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-messaging-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-modcluster-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-modules-eap-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-naming-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-network-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-osgi-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-osgi-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-osgi-service-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-picketlink-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-platform-mbean-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-pojo-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-process-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-product-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-protocol-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-remoting-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-sar-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-server-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-standalone-0:7.5.23-4.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-system-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-threads-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-transactions-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-version-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-web-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-webservices-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossas-welcome-content-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-weld-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-as-xts-0:7.5.23-3.Final_redhat_00002.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jboss-remoting3-jmx-0:1.1.4-2.Final_redhat_00001.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat jbossweb-0:7.5.31-1.Final_redhat_1.1.ep6.el7 *
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 RedHat weld-core-0:1.1.34-2.Final_redhat_2.1.ep6.el7 *
Red Hat JBoss Web Server 3.1 RedHat ajp *
Red Hat JBoss Web Server 3 for RHEL 6 RedHat tomcat7-0:7.0.70-38.ep7.el6 *
Red Hat JBoss Web Server 3 for RHEL 6 RedHat tomcat8-0:8.0.36-42.ep7.el6 *
Red Hat JBoss Web Server 3 for RHEL 6 RedHat tomcat-native-0:1.2.23-21.redhat_21.ep7.el6 *
Red Hat JBoss Web Server 3 for RHEL 7 RedHat tomcat7-0:7.0.70-38.ep7.el7 *
Red Hat JBoss Web Server 3 for RHEL 7 RedHat tomcat8-0:8.0.36-42.ep7.el7 *
Red Hat JBoss Web Server 3 for RHEL 7 RedHat tomcat-native-0:1.2.23-21.redhat_21.ep7.el7 *
Red Hat JBoss Web Server 5.3 on RHEL 6 RedHat jws5-tomcat-0:9.0.30-3.redhat_4.1.el6jws *
Red Hat JBoss Web Server 5.3 on RHEL 6 RedHat jws5-tomcat-native-0:1.2.23-4.redhat_4.el6jws *
Red Hat JBoss Web Server 5.3 on RHEL 7 RedHat jws5-tomcat-0:9.0.30-3.redhat_4.1.el7jws *
Red Hat JBoss Web Server 5.3 on RHEL 7 RedHat jws5-tomcat-native-0:1.2.23-4.redhat_4.el7jws *
Red Hat JBoss Web Server 5.3 on RHEL 8 RedHat jws5-tomcat-0:9.0.30-3.redhat_4.1.el8jws *
Red Hat JBoss Web Server 5.3 on RHEL 8 RedHat jws5-tomcat-native-0:1.2.23-4.redhat_4.el8jws *
Red Hat JBoss Web Server (JWS) 5.3 RedHat ajp *
Red Hat Runtimes Spring Boot 2.1.13 RedHat tomcat *
Tomcat7 Ubuntu bionic *
Tomcat7 Ubuntu esm-apps/bionic *
Tomcat7 Ubuntu esm-apps/xenial *
Tomcat7 Ubuntu esm-infra-legacy/trusty *
Tomcat7 Ubuntu trusty *
Tomcat7 Ubuntu trusty/esm *
Tomcat7 Ubuntu xenial *
Tomcat8 Ubuntu bionic *
Tomcat8 Ubuntu esm-apps/bionic *
Tomcat8 Ubuntu esm-infra/xenial *
Tomcat8 Ubuntu trusty *
Tomcat8 Ubuntu xenial *
Tomcat9 Ubuntu bionic *
Tomcat9 Ubuntu eoan *
Tomcat9 Ubuntu esm-apps/bionic *
Tomcat9 Ubuntu trusty *
Tomcat9 Ubuntu upstream *

References