Lucene search
RedHatRHSA-2021:0495HistoryFeb 11, 2021 - 1:46 p.m.
(RHSA-2021:0495) Moderate: Red Hat JBoss Web Server 5.4.1 Security Update
2021-02-1113:46:15
access.redhat.com
61
0.004 Low
EPSS
Percentile
74.4%
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.
Security Fix(es):
- tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)
- tomcat: HTTP/2 request header mix-up (CVE-2020-17527)
- tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)
- openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
nessus
nessus
RHEL 7 / 8 : Red Hat JBoss Web Server 5.4.1 Security Update (Moderate) (RHSA-2021:0494)
2021-02-11 00:00:00
Apache Tomcat 10.0.0.M1 < 10.0.0.M10 multiple vulnerabilities
2021-06-21 00:00:00
Debian DSA-4835-1 : tomcat9 - security update
2021-01-25 00:00:00
redhat
redhat
openvas
openvas
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2021-1175)
2021-02-02 00:00:00
Debian: Security Advisory (DSA-4835-1)
2021-01-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0040-1)
2021-04-19 00:00:00
osv
osv
tomcat9 - security update
2021-01-22 00:00:00
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-02-09 22:58:06
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-02-09 23:03:53
debian
debian
[SECURITY] [DSA 4835-1] tomcat9 security update
2021-01-22 18:48:45
[SECURITY] [DLA 2495-1] tomcat8 security update
2020-12-16 17:28:07
[SECURITY] [DLA 2407-1] tomcat8 security update
2020-10-14 12:05:03
kaspersky
kaspersky
KLA12087 Multiple vulnerabilities in Apache Tomcat
2020-11-17 00:00:00
KLA12085 SUI vulnerability in Apache Tomcat
2020-09-15 00:00:00
KLA12086 OSI vulnerability in Apache Tomcat
2020-11-11 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.40
2020-11-17 00:00:00
Fixed in Apache Tomcat 10.0.0-M10
2020-11-17 00:00:00
Fixed in Apache Tomcat 8.5.60
2020-11-17 00:00:00
ibm
ibm
cvelist
cvelist
CVE-2020-17527 Apache Tomcat: Request header mix-up between HTTP/2 streams
2020-12-03 18:30:14
CVE-2020-13943
2020-10-12 13:46:47
CVE-2021-24122 Apache Tomcat information disclosure
2021-01-14 14:45:18
ubuntucve
ubuntucve
prion
prion
Cross site request forgery (csrf)
2020-10-12 14:15:00
Design/Logic Flaw
2021-01-14 15:15:00
Cross site request forgery (csrf)
2020-12-03 19:15:00
suse
suse
Security update for tomcat (moderate)
2021-02-22 00:00:00
Security update for tomcat (moderate)
2021-01-16 00:00:00
Security update for tomcat (moderate)
2020-11-06 00:00:00
cve
cve
redhatcve
redhatcve
mageia
mageia
Updated tomcat packages fix a security vulnerability
2020-10-30 01:25:06
Updated tomcat packages fix a security vulnerability
2021-02-06 21:20:41
Updated tomcat packages fix security vulnerability
2021-01-10 22:46:12
nvd
nvd
f5
f5
K65078159 : Apache Tomcat vulnerability CVE-2021-24122
2021-01-18 00:00:00
K31573032 : Tomcat vulnerability CVE-2020-13943
2020-10-20 00:00:00
K44415301 : Apache Tomcat vulnerability CVE-2020-17527
2020-12-31 00:00:00
amazon
amazon
Medium: tomcat8
2020-12-16 20:52:00
Medium: tomcat8
2021-01-12 22:52:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-02-09 22:58:06
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-02-09 23:03:53
Information Disclosure in Apache Tomcat
2021-05-13 22:30:02
symantec
symantec
Apache Tomcat Vulnerabilities May 2020 - Mar 2021
2021-03-16 19:59:07
cisa
cisa
Apache Releases Security Advisory for Apache Tomcat
2020-12-04 00:00:00
Apache Releases Security Updates for Apache Tomcat
2020-10-14 00:00:00
Apache Releases Security Advisory for Tomcat
2021-01-15 00:00:00
debiancve
debiancve
veracode
veracode
Information Disclosure
2020-10-13 04:49:31
HTTP/2 Request Mix-up
2020-10-13 01:45:40
Denial Of Service (DoS)
2020-12-04 02:58:16
atlassian
atlassian
Jira is affected by Tomcat CVE-2020-13943
2021-08-16 03:40:01
Jira is affected by Tomcat CVE-2020-13943
2021-08-16 03:40:01
archlinux
archlinux
[ASA-202012-3] tomcat9: information disclosure
2020-12-05 00:00:00
[ASA-202012-4] tomcat8: information disclosure
2020-12-05 00:00:00
[ASA-202012-24] openssl: denial of service
2020-12-16 00:00:00
gentoo
gentoo
Apache Tomcat: Information disclosure
2020-12-24 00:00:00
OpenSSL: Denial of service
2020-12-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-17527 affecting package tomcat for versions less than 9.0.39-5
2024-07-01 09:08:36
CVE-2020-17527 affecting package tomcat for versions less than 9.0.39-5
2024-07-01 09:08:36
CVE-2020-1971 affecting package mysql 8.0.22-2
2021-08-25 19:57:27
cgr
cgr
CVE-2021-24122 vulnerabilities
2024-05-19 03:07:16
freebsd_advisory
freebsd_advisory
FreeBSD-SA-20:33.openssl
2020-12-08 00:00:00