mod_cluster vulnerabilities (Red Hat)
86 vulnerabilities.
mod_clusterRed HatThe SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP)...5.8 Mediummod_clusterRed HatThe CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.0 Mediummod_clusterRed HatThe (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise...6.8 Mediummod_clusterRed HatThe NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0,...2.1 Lowmod_clusterRed HatCross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application...4.3 Mediummod_clusterRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 Mediummod_clusterRed HatJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 Mediummod_clusterRed HatImproper Authentication in Apache CXF4.3 Mediummod_clusterRed HatXML Signature/Encryption Not Validated in Apache CXF10.0 Highmod_clusterRed HatApache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions5.0 Mediummod_clusterRed HatUser confusion in IronJacamar4.3 Mediummod_clusterRed HatAuthentication Bypass in Apache Tomcat4.3 Mediummod_clusterRed HatThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...5.0 Mediummod_clusterRed HatJGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...3.3 Lowmod_clusterRed HatThe servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA...6.8 Mediummod_clusterRed HatCross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss...6.0 Mediummod_clusterRed HatThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...5.0 Mediummod_clusterRed HatImproper Access Control in JBoss mod_cluster4.3 Mediummod_clusterRed HatRemote web-service operation execution in Apache CXF4.3 Mediummod_clusterRed HatThe X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...5.0 Mediummod_clusterRed HatMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...2.6 Lowmod_clusterRed Hattwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...2.1 Lowmod_clusterRed HatImproper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework7.5 Highmod_clusterRed HatOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...2.1 Lowmod_clusterRed Hatmod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes...7.5 Highmod_clusterRed HatOpenID4Java does not verify that Attribute Exchange (AX) information is signed5.8 Mediummod_clusterRed Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 Mediummod_clusterRed HatStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...4.3 Mediummod_clusterRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediummod_clusterRed HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat1.2 Lowmod_clusterRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediummod_clusterRed HatMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...5.0 Mediummod_clusterRed HatThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...5.0 Mediummod_clusterRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 Lowmod_clusterRed HatJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...5.0 Mediummod_clusterRed HatCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 Medium