[jboss-jira] [JBoss JIRA] Resolved: (JBWEB-212) CVE-2011-3190 - authentication bypass and information disclosure

Fri Sep 16 08:01:27 EDT 2011

     [ https://issues.jboss.org/browse/JBWEB-212?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mike Millson resolved JBWEB-212.
--------------------------------

    Fix Version/s: JBossWeb-7.0.2.GA
       Resolution: Done


> CVE-2011-3190 - authentication bypass and information disclosure
> ----------------------------------------------------------------
>
>                 Key: JBWEB-212
>                 URL: https://issues.jboss.org/browse/JBWEB-212
>             Project: JBoss Web
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Tomcat
>    Affects Versions: JBossWeb-7.0.1.GA 
>            Reporter: Mustafa Musaji
>            Assignee: Mike Millson
>              Labels: jbossweb
>             Fix For: JBossWeb-7.0.2.GA
>
>
> Incorporate the fixes by Jean-Frederic Clere here for this CVE https://home.corp.redhat.com/wiki/jboss-web-cve

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira