CVE-2010-1157
NoneCVSS
—
EPSS
52.5%
Published
Apr 23, 2010
CISA due date
—
The record
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.tomcat:tomcat | 5.5.0 | 5.5.30 |
| Maven | org.apache.tomcat:tomcat | 6.0.0 | 6.0.28 |
| Debian:5.0 | tomcat5.5 | 0 | 5.5.26-5lenny2 |
| Red Hat:jboss_enterprise_application_platform:4.2.0::el4 | jbossweb | 0 | 0:2.0.0-6.CP14.0jpp.ep1.1.el4 |
| Red Hat:jboss_enterprise_application_platform:4.2.0::el5 | jbossweb | 0 | 0:2.0.0-6.CP14.0jpp.ep1.1.el5 |
| Red Hat:jboss_enterprise_application_platform:4.3.0::el4 | jbossweb | 0 | 0:2.0.0-6.CP14.0jpp.ep1.1.el4 |
| Red Hat:jboss_enterprise_application_platform:4.3.0::el5 | jbossweb | 0 | 0:2.0.0-6.CP14.0jpp.ep1.1.el5 |
| Red Hat:jboss_enterprise_web_server:1::el4 | ant | 0 | 0:1.7.1-13.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | antlr | 0 | 0:2.7.7-7.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | bcel | 0 | 0:5.2-8.1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | cglib | 0 | 0:2.2-5.1.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | dom4j | 0 | 0:1.6.1-11.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | ecj | 0 | 1:3.3.1.1-3.2.2.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | glassfish-jaf | 0 | 0:1.1.0-6.1.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | glassfish-javamail | 0 | 0:1.4.2-0.4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | glassfish-jsf | 0 | 0:1.2_13-2.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3 | 0 | 1:3.3.2-1.5.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-annotations | 0 | 0:3.4.0-3.3.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-annotations-javadoc | 0 | 0:3.4.0-3.3.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-commons-annotations | 0 | 0:3.1.0-1.8.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-commons-annotations-javadoc | 0 | 0:3.1.0-1.8.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-ejb-persistence-3.0-api | 0 | 1:1.0.2-3.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-ejb-persistence-3.0-api-javadoc | 0 | 1:1.0.2-3.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-entitymanager | 0 | 0:3.4.0-4.3.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-entitymanager-javadoc | 0 | 0:3.4.0-4.3.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | hibernate3-javadoc | 0 | 1:3.3.2-1.5.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22 | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22-apr | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22-apr-devel | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22-apr-util | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22-apr-util-devel | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22-debuginfo | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22-devel | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | httpd22-manual | 0 | 0:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-beanutils | 0 | 0:1.8.0-4.1.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-chain | 0 | 0:1.2-2.2.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-codec | 0 | 0:1.3-9.1.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-collections | 0 | 0:3.2.1-4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-collections-tomcat5 | 0 | 0:3.2.1-4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-daemon | 0 | 1:1.0.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-daemon-jsvc | 0 | 1:1.0.5-1.4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-daemon-jsvc-debuginfo | 0 | 1:1.0.5-1.4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-dbcp | 0 | 0:1.2.1-16.4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-dbcp-tomcat5 | 0 | 0:1.2.1-16.4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-digester | 0 | 0:1.8.1-8.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-el | 0 | 0:1.0-19.2.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-fileupload | 0 | 1:1.1.1-7.4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-httpclient | 0 | 1:3.1-1.1.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-io | 0 | 0:1.4-1.3.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-launcher | 0 | 0:1.1-4.6.1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-logging | 0 | 0:1.1.1-0.4.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-logging-jboss | 0 | 0:1.1-10.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-logging-tomcat6 | 0 | 0:1.1.1-0.4.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-modeler | 0 | 0:2.0-4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-pool | 0 | 0:1.3-11.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-pool-tomcat5 | 0 | 0:1.3-11.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-commons-validator | 0 | 0:1.3.1-7.5.1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-oro | 0 | 0:2.0.8-3.3.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jakarta-taglibs-standard | 0 | 0:1.1.1-9.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | javassist | 0 | 0:3.12.0-1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jboss-common-core | 0 | 0:2.2.17-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jboss-common-logging-jdk | 0 | 0:2.1.2-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jboss-common-logging-spi | 0 | 0:2.1.2-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jboss-javaee | 0 | 0:5.0.1-2.9.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jboss-javaee-poms | 0 | 0:5.0.1-2.9.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jboss-jms-1.1-api | 0 | 0:5.0.1-2.9.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jboss-transaction-1.0.1-api | 0 | 0:5.0.1-2.9.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jcommon | 0 | 0:1.0.16-1.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | jfreechart | 0 | 0:1.0.13-2.3.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | log4j | 0 | 0:1.2.14-18.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_cluster | 0 | 0:1.0.10-2.GA_CP01.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_cluster-demo | 0 | 0:1.0.10-2.GA_CP01.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_cluster-jbossas | 0 | 0:1.0.10-2.GA_CP01.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_cluster-jbossweb2 | 0 | 0:1.0.10-2.GA_CP01.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_cluster-native | 0 | 0:1.0.10-2.GA_CP01.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_cluster-native-debuginfo | 0 | 0:1.0.10-2.GA_CP01.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_cluster-tomcat6 | 0 | 0:1.0.10-2.GA_CP01.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_jk | 0 | 0:1.2.31-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_jk-ap20 | 0 | 0:1.2.31-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_jk-debuginfo | 0 | 0:1.2.31-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_jk-manual | 0 | 0:1.2.31-1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mod_ssl22 | 0 | 1:2.2.17-14.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | mx4j | 0 | 1:3.0.1-9.3.4.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | objectweb-asm | 0 | 0:3.1-5.3.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | regexp | 0 | 0:1.5-1.2.1.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | struts12 | 0 | 0:1.2.9-3.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat-jkstatus-ant | 0 | 0:1.2.31-2.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat-native | 0 | 0:1.1.20-2.0.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat-native-debuginfo | 0 | 0:1.1.20-2.0.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5 | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-admin-webapps | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-common-lib | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-jasper | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-jasper-eclipse | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-jasper-javadoc | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-jsp-2.0-api | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-jsp-2.0-api-javadoc | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-parent | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-server-lib | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-servlet-2.4-api | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-servlet-2.4-api-javadoc | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat5-webapps | 0 | 0:5.5.33-14_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6 | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-admin-webapps | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-docs-webapp | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-el-1.0-api | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-javadoc | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-jsp-2.1-api | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-lib | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-log4j | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-servlet-2.5-api | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | tomcat6-webapps | 0 | 0:6.0.32-15_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | xalan-j2 | 0 | 0:2.7.1-5.3_patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | xerces-j2 | 0 | 0:2.9.1-3.patch01.1.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | xml-commons | 0 | 1:1.3.04-7.12.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | xml-commons-jaxp-1.2-apis | 0 | 1:1.3.04-7.12.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | xml-commons-jaxp-1.3-apis | 0 | 1:1.3.04-7.12.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el4 | xml-commons-resolver12 | 0 | 1:1.3.04-7.12.ep5.el4 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-antlr | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-apache-bcel | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-apache-bsf | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-apache-log4j | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-apache-oro | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-apache-regexp | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-apache-resolver | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-commons-logging | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-javamail | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-jdepend | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-jmf | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-jsch | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-junit | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-nodeps | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-scripts | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-swing | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ant-trax | 0 | 0:1.7.1-13.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | antlr | 0 | 0:2.7.7-7.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | cglib | 0 | 0:2.2-5.1.1.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | dom4j | 0 | 0:1.6.1-11.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | ecj3 | 0 | 1:3.3.1.1-3.1.1.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | glassfish-jsf | 0 | 0:1.2_13-3.1.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3 | 0 | 1:3.3.2-1.4.GA_CP04.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-annotations | 0 | 0:3.4.0-3.2.GA_CP04.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-annotations-javadoc | 0 | 0:3.4.0-3.2.GA_CP04.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-commons-annotations | 0 | 0:3.1.0-1.8.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-commons-annotations-javadoc | 0 | 0:3.1.0-1.8.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-ejb-persistence-3.0-api | 0 | 1:1.0.2-3.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-ejb-persistence-3.0-api-javadoc | 0 | 1:1.0.2-3.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-entitymanager | 0 | 0:3.4.0-4.3.GA_CP04.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-entitymanager-javadoc | 0 | 0:3.4.0-4.3.GA_CP04.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | hibernate3-javadoc | 0 | 1:3.3.2-1.4.GA_CP04.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | httpd | 0 | 0:2.2.17-11.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | httpd-devel | 0 | 0:2.2.17-11.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | httpd-manual | 0 | 0:2.2.17-11.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-beanutils | 0 | 0:1.8.0-4.1.2.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-chain | 0 | 0:1.2-2.2.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-codec | 0 | 0:1.3-9.2.1.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-collections | 0 | 0:3.2.1-4.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-collections-tomcat5 | 0 | 0:3.2.1-4.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-daemon | 0 | 1:1.0.5-1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-daemon-jsvc | 0 | 1:1.0.5-1.4.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-dbcp | 0 | 0:1.2.1-16.4.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-dbcp-tomcat5 | 0 | 0:1.2.1-16.4.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-digester | 0 | 0:1.8.1-8.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-fileupload | 0 | 1:1.1.1-7.4.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-httpclient | 0 | 1:3.1-1.2.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-io | 0 | 0:1.4-1.3.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-logging | 0 | 0:1.1.1-0.4.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-logging-jboss | 0 | 0:1.1-10.2.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-logging-tomcat6 | 0 | 0:1.1.1-0.4.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-pool | 0 | 0:1.3-11.2.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-pool-tomcat5 | 0 | 0:1.3-11.2.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-commons-validator | 0 | 0:1.3.1-7.5.2.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-oro | 0 | 0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jakarta-taglibs-standard | 0 | 0:1.1.1-9.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | javassist | 0 | 0:3.12.0-1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jboss-common-core | 0 | 0:2.2.17-1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jboss-common-logging-jdk | 0 | 0:2.1.2-1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jboss-common-logging-spi | 0 | 0:2.1.2-1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jboss-javaee | 0 | 0:5.0.1-2.9.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jboss-javaee-poms | 0 | 0:5.0.1-2.9.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jboss-jms-1.1-api | 0 | 0:5.0.1-2.9.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jboss-transaction-1.0.1-api | 0 | 0:5.0.1-2.9.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jcommon | 0 | 0:1.0.16-1.2.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | jfreechart | 0 | 0:1.0.13-2.3.2.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_cluster | 0 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_cluster-demo | 0 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_cluster-jbossas | 0 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_cluster-jbossweb2 | 0 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_cluster-native | 0 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_cluster-tomcat6 | 0 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_jk | 0 | 0:1.2.31-1.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_jk-ap20 | 0 | 0:1.2.31-1.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_jk-manual | 0 | 0:1.2.31-1.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | mod_ssl | 0 | 1:2.2.17-11.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | objectweb-asm | 0 | 0:3.1-5.3.1.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | struts12 | 0 | 0:1.2.9-3.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | tomcat-jkstatus-ant | 0 | 0:1.2.31-2.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | tomcat-native | 0 | 0:1.1.20-2.1.ep5.el5 |
| Red Hat:jboss_enterprise_web_server:1::el5 | tomcat5 | 0 | 0:5.5.33-16_patch_04.ep5.el5 |
Related vulnerabilities
- CVE-2026-24733 Improper Input Validation vulnerability in Apache Tomcat. Also affects org.apache.tomcat:tomcat
- CVE-2025-66614 Improper Input Validation vulnerability. Also affects org.apache.tomcat:tomcat
- GHSA-wmwf-9ccg-fff5 Apache Tomcat Vulnerable to Relative Path Traversal Also affects org.apache.tomcat:tomcat
- GHSA-vfww-5hm6-hx2j Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences Also affects org.apache.tomcat:tomcat
- CVE-2025-61795 Improper Resource Shutdown or Release vulnerability in Apache Tomcat. Also affects org.apache.tomcat:tomcat
- CVE-2025-55752 Relative Path Traversal vulnerability in Apache Tomcat. Also affects org.apache.tomcat:tomcat
- CVE-2025-55754 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache… Also affects org.apache.tomcat:tomcat
- CVE-2025-49124 Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. Also affects org.apache.tomcat:tomcat