Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:1324
HistoryMar 18, 2024 - 2:35 p.m.

(RHSA-2024:1324) Important: Red Hat JBoss Web Server 6.0.1 release and security update

2024-03-1814:35:54
access.redhat.com
15
red hat jboss
apache tomcat
mod_cluster
picketlink vault
security update
http request smuggling
open redirect
http/2
cvss score
cve page.

7.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

JSON

Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.

This release of Red Hat JBoss Web Server 6.0.1 serves as a replacement for Red Hat JBoss Web Server 6.0.0. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes linked to in the References section.

Security Fix(es):

  • tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)

  • tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)

  • tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchjws6-tomcat-jsp-3.1-api< 10.1.8-6.redhat_00013.1.el8jwsjws6-tomcat-jsp-3.1-api-10.1.8-6.redhat_00013.1.el8jws.noarch.rpm
RedHat8noarchjws6-tomcat-selinux< 10.1.8-6.redhat_00013.1.el8jwsjws6-tomcat-selinux-10.1.8-6.redhat_00013.1.el8jws.noarch.rpm
RedHat8noarchjws6-tomcat-docs-webapp< 10.1.8-6.redhat_00013.1.el8jwsjws6-tomcat-docs-webapp-10.1.8-6.redhat_00013.1.el8jws.noarch.rpm
RedHat9noarchjws6-tomcat-el-5.0-api< 10.1.8-6.redhat_00013.1.el9jwsjws6-tomcat-el-5.0-api-10.1.8-6.redhat_00013.1.el9jws.noarch.rpm
RedHat8noarchjws6-tomcat< 10.1.8-6.redhat_00013.1.el8jwsjws6-tomcat-10.1.8-6.redhat_00013.1.el8jws.noarch.rpm
RedHat9noarchjws6-tomcat-docs-webapp< 10.1.8-6.redhat_00013.1.el9jwsjws6-tomcat-docs-webapp-10.1.8-6.redhat_00013.1.el9jws.noarch.rpm
RedHat8noarchjws6-tomcat-admin-webapps< 10.1.8-6.redhat_00013.1.el8jwsjws6-tomcat-admin-webapps-10.1.8-6.redhat_00013.1.el8jws.noarch.rpm
RedHat8noarchjws6-tomcat-javadoc< 10.1.8-6.redhat_00013.1.el8jwsjws6-tomcat-javadoc-10.1.8-6.redhat_00013.1.el8jws.noarch.rpm
RedHat9noarchjws6-tomcat< 10.1.8-6.redhat_00013.1.el9jwsjws6-tomcat-10.1.8-6.redhat_00013.1.el9jws.noarch.rpm
RedHat9noarchjws6-tomcat-jsp-3.1-api< 10.1.8-6.redhat_00013.1.el9jwsjws6-tomcat-jsp-3.1-api-10.1.8-6.redhat_00013.1.el9jws.noarch.rpm
Rows per page:
1-10 of 201

Related

nessus 55
redhat 9
tomcat 10
openvas 19
debian 4
osv 18
ibm 19
vulnrichment 1
hackerone 1
ubuntucve 3
cgr 3
veracode 3
cvelist 3
github 3
cve 3
kaspersky 5
f5 2
almalinux 4
atlassian 9
cnvd 1
prion 3
debiancve 3
nvd 3
wolfi 1
amazon 2
oraclelinux 4
redhatcve 3
rocky 2
fedora 2
mageia 1
nessus
nessus
RHEL 8 / 9 : Red Hat JBoss Web Server 6.0.1 (RHSA-2024:1324)
2024-03-18 00:00:00
Apache Tomcat 11.0.0.M1 < 11.0.0.M11 multiple vulnerabilities
2023-08-25 00:00:00
RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.7.8 (RHSA-2024:1318)
2024-03-18 00:00:00
redhat
redhat
(RHSA-2024:1325) Important: Red Hat JBoss Web Server 6.0.1 release and security update
2024-03-18 14:38:33
(RHSA-2024:1319) Important: Red Hat JBoss Web Server 5.7.8 release and security update
2024-03-18 11:12:11
(RHSA-2024:1318) Important: Red Hat JBoss Web Server 5.7.8 release and security update
2024-03-18 11:11:50
tomcat
tomcat
Fixed in Apache Tomcat 11.0.0-M11
2023-08-25 00:00:00
Fixed in Apache Tomcat 8.5.96
2023-11-13 00:00:00
Fixed in Apache Tomcat 9.0.80
2023-08-25 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5665-1)
2024-04-18 00:00:00
Debian: Security Advisory (DSA-5667-1)
2024-04-22 00:00:00
Apache Tomcat Open Redirect Vulnerability (Aug 2023) - Windows
2023-08-28 00:00:00
debian
debian
[SECURITY] [DSA 5667-1] tomcat9 security update
2024-04-19 20:06:14
[SECURITY] [DSA 5665-1] tomcat10 security update
2024-04-17 22:03:15
[SECURITY] [DLA 3707-1] tomcat9 security update
2024-01-05 09:40:41
osv
osv
tomcat10 - security update
2024-04-17 00:00:00
tomcat9 - security update
2024-04-19 00:00:00
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
2024-03-13 18:31:34
ibm
ibm
Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.
2024-03-27 17:19:49
Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.
2024-03-27 17:25:57
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Apache Tomcat [CVE-2024-24549]
2024-06-20 18:26:15
vulnrichment
vulnrichment
CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS
2024-03-13 15:46:53
hackerone
hackerone
Internet Bug Bounty: Denial of Service caused by HTTP/2 CONTINUATION Flood
2024-01-25 12:51:50
ubuntucve
ubuntucve
CVE-2024-24549
2024-03-13 00:00:00
CVE-2023-41080
2023-08-25 00:00:00
CVE-2023-46589
2023-11-28 00:00:00
cgr
cgr
CVE-2024-24549 vulnerabilities
2024-05-19 03:07:16
CVE-2023-41080 vulnerabilities
2024-05-19 03:07:16
CVE-2023-46589 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Denial Of Service (DoS)
2024-03-16 20:57:13
Request Smuggling
2023-11-29 06:11:28
Open Redirect
2023-08-29 11:34:15
cvelist
cvelist
CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS
2024-03-13 15:46:53
CVE-2023-46589 Apache Tomcat: HTTP request smuggling via malformed trailer headers
2023-11-28 15:31:52
CVE-2023-41080 Apache Tomcat: Open redirect with FORM authentication
2023-08-25 20:39:36
github
github
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
2024-03-13 18:31:34
Apache Tomcat Open Redirect vulnerability
2023-08-25 21:30:48
Apache Tomcat Improper Input Validation vulnerability
2023-11-28 18:30:23
cve
cve
CVE-2024-24549
2024-03-13 16:15:29
CVE-2023-46589
2023-11-28 16:15:06
CVE-2023-41080
2023-08-25 21:15:09
kaspersky
kaspersky
KLA62192 ACE vulnerability in Apache Tomcat
2023-11-13 00:00:00
KLA62193 ACE vulnerability in Apache Tomcat
2023-11-14 00:00:00
KLA52554 SB vulnerability in Apache Tomcat
2023-08-25 00:00:00
f5
f5
K000137926 : Apache Tomcat vulnerability CVE-2023-46589
2023-12-18 00:00:00
K000136011 : Apache Tomcat Open Redirect vulnerability CVE-2023-41080
2023-08-29 00:00:00
almalinux
almalinux
Important: tomcat security update
2024-01-29 00:00:00
Important: tomcat security update
2024-03-05 00:00:00
Important: tomcat security and bug fix update
2024-05-23 00:00:00
atlassian
atlassian
Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Confluence Data Center and Server
2024-01-17 06:46:32
Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Bamboo Data Center and Server
2023-12-14 07:45:15
Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Jira Software Data Center and Server
2024-01-11 06:46:14
cnvd
cnvd
Apache Tomcat Open Redirect Vulnerability (CNVD-2023-80565)
2023-08-29 00:00:00
prion
prion
Input validation
2024-03-13 16:15:00
Open redirect
2023-08-25 21:15:00
Input validation
2023-11-28 16:15:00
debiancve
debiancve
CVE-2024-24549
2024-03-13 16:15:29
CVE-2023-46589
2023-11-28 16:15:06
CVE-2023-41080
2023-08-25 21:15:09
nvd
nvd
CVE-2024-24549
2024-03-13 16:15:29
CVE-2023-46589
2023-11-28 16:15:06
CVE-2023-41080
2023-08-25 21:15:09
wolfi
wolfi
CVE-2024-24549 vulnerabilities
2024-06-26 03:08:30
amazon
amazon
Medium: tomcat8
2024-01-19 01:19:00
Important: tomcat8
2024-06-19 18:46:00
oraclelinux
oraclelinux
tomcat security update
2024-01-29 00:00:00
tomcat security update
2024-03-07 00:00:00
tomcat security and bug fix update
2024-06-06 00:00:00
redhatcve
redhatcve
CVE-2023-46589
2023-11-29 09:26:39
CVE-2023-41080
2023-08-30 15:16:29
CVE-2024-24549
2024-03-14 21:40:09
rocky
rocky
tomcat security update
2024-02-12 20:16:50
tomcat security and bug fix update
2024-06-14 14:00:40
fedora
fedora
[SECURITY] Fedora 39 Update: tomcat-9.0.89-1.fc39
2024-06-13 03:03:35
[SECURITY] Fedora 40 Update: tomcat-9.0.89-1.fc40
2024-06-23 06:52:19
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2024-03-27 01:02:49

7.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

JSON
Related for RHSA-2024:1324
nessus55redhat9tomcat10openvas19debian4osv18ibm19vulnrichment1hackerone1ubuntucve3cgr3veracode3cvelist3github3cve3kaspersky5f52almalinux4atlassian9cnvd1prion3debiancve3nvd3wolfi1amazon2oraclelinux4redhatcve3rocky2fedora2mageia1