mod_cluster vulnerabilities (Red Hat)
86 vulnerabilities.
-
mod_clusterRed Hat Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J 5.9 Medium -
mod_clusterRed Hat Apache Tomcat unauthorized access vulnerability 5.9 Medium -
mod_clusterRed Hat Apache Tomcat information exposure vulnerability 6.5 Medium -
mod_clusterRed Hat When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2... 5.9 Medium -
mod_clusterRed Hat Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J 7.5 High -
mod_clusterRed Hat When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field... 7.1 High -
mod_clusterRed Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat 8.1 High -
mod_clusterRed Hat When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server 8.1 High -
mod_clusterRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 7.5 High -
mod_clusterRed Hat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat 7.5 High -
mod_clusterRed Hat Apache Tomcat Improper Access Control vulnerability 9.8 Critical -
mod_clusterRed Hat Improper Input Validation in Apache Tomcat 7.1 High -
mod_clusterRed Hat Incorrect Authorization in Apache Tomcat 7.5 High -
mod_clusterRed Hat Apache Tomcat vulnerable to SecurityManager bypass 7.5 High -
mod_clusterRed Hat System Property Disclosure in Apache Tomcat 5.3 Medium -
mod_clusterRed Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat 9.1 Critical -
mod_clusterRed Hat Observable Discrepancy in Apache Tomcat 5.9 Medium -
mod_clusterRed Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and... 7.8 High -
mod_clusterRed Hat mod_cluster Denial of Service vulnerability 7.5 High -
mod_clusterRed Hat The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8... 7.8 High -
mod_clusterRed Hat The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not... 8.1 High -
mod_clusterRed Hat High severity vulnerability that affects commons-fileupload:commons-fileupload 7.5 High -
mod_clusterRed Hat Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0... 7.5 High -
mod_clusterRed Hat Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t... 7.5 High -
mod_clusterRed Hat Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2... 4.3 Medium -
mod_clusterRed Hat The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not... 6.0 Medium -
mod_clusterRed Hat The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an... 6.0 Medium -
mod_clusterRed Hat Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous... 5.0 Medium -
mod_clusterRed Hat The default configuration for the Command Line Interface in Red Hat Enterprise Application... 2.1 Low -
mod_clusterRed Hat Improper Access Control in Apache WSS4J 5.0 Medium -
mod_clusterRed Hat The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used... 4.9 Medium -
mod_clusterRed Hat The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise... 5.5 Medium -
mod_clusterRed Hat The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,... 5.0 Medium -
mod_clusterRed Hat Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote... 6.8 Medium -
mod_clusterRed Hat The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP... 4.3 Medium -
mod_clusterRed Hat Missing XML Validation in Apache Tomcat 4.3 Medium -
mod_clusterRed Hat Netty denial of service vulnerability 5.0 Medium -
mod_clusterRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 4.3 Medium -
mod_clusterRed Hat The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise... 5.5 Medium -
mod_clusterRed Hat Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0... 3.7 Low -
mod_clusterRed Hat The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and... 4.3 Medium -
mod_clusterRed Hat Improper Control of Generation of Code in HawtJNI 4.4 Medium -
mod_clusterRed Hat Inadequate Encryption Strength in Apache CXF 6.4 Medium -
mod_clusterRed Hat Uncontrolled Resource Consumption in Apache Tomcat 7.8 High -
mod_clusterRed Hat Improper Input Validation in Apache Tomcat 6.4 Medium -
mod_clusterRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 2.6 Low -
mod_clusterRed Hat Improper Authentication in Apache Tomcat 6.8 Medium -
mod_clusterRed Hat Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the... 4.3 Medium -
mod_clusterRed Hat Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24... 4.3 Medium -
mod_clusterRed Hat The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web... 4.9 Medium - Show olderLoading…