[jboss-user] [Tomcat, HTTPD, Servlets & JSP] - Re: What version of tomcat is embedded in jboss 4.2.3?
do-not-reply at jboss.com
Wed Dec 3 02:54:52 EST 2008
4.2.2 is using JBossWEB 2.0.1.GA and the vulnerabilities are not fixed in old community versions.
If you want to be safe use Jboss supported product.
You can also build JWB 2.0.x from the lastest CP tag and replace the jar files in you 4.2.2. (Look in the forum it is already explain somewhere).
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4193929#4193929
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4193929
More information about the jboss-user