RedHat: Moderate: JBoss Enterprise Application Platform

LinuxSecurity.com: Updated JBoss Enterprise Application Platform packages that fix several security issues and bugs are now available for Red Hat Application Stack v1 and v2. Tomcat incorrectly treated a single quote character (') in a cookie value as a delimiter. In some circumstances this lead to the leaking of information such as session ID to an attacker. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Related Items