jws5-tomcat-native vulnerabilities

Known vulnerabilities in the jws5-tomcat-native package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Improper Input Validation	<0:1.2.31-17.redhat_17.el7jws
H Missing Required Cryptographic Step	<0:1.2.31-17.redhat_17.el7jws
H HTTP Request Smuggling	<0:1.2.31-17.redhat_17.el7jws
M Open Redirect	<0:1.2.31-16.redhat_16.el7jws
M Excessive Iteration	<0:1.2.31-16.redhat_16.el7jws
M Resource Exhaustion	<0:1.2.31-16.redhat_16.el7jws
M Resource Exhaustion	<0:1.2.31-16.redhat_16.el7jws
M Improper Certificate Validation	<0:1.2.31-16.redhat_16.el7jws
M Improper Certificate Validation	<0:1.2.31-16.redhat_16.el7jws
M Resource Exhaustion	<0:1.2.31-16.redhat_16.el7jws
M Off-by-one Error	<0:1.2.31-15.redhat_15.el7jws
M SQL Injection	<0:1.2.26-3.redhat_3.el7jws
M Information Exposure	<0:1.2.31-15.redhat_15.el7jws
M Allocation of Resources Without Limits or Throttling	<0:1.2.31-15.redhat_15.el7jws
M Integer Overflow or Wraparound	<0:1.2.31-15.redhat_15.el7jws
H Incorrect Type Conversion or Cast	<0:1.2.31-14.redhat_14.el7jws
H Use After Free	<0:1.2.31-14.redhat_14.el7jws
H Double Free	<0:1.2.31-14.redhat_14.el7jws
H Information Exposure	<0:1.2.31-14.redhat_14.el7jws
M Race Condition	<0:1.2.31-10.redhat_10.el7jws
M Arbitrary Command Injection	<0:1.2.31-11.redhat_11.el7jws
M Arbitrary Command Injection	<0:1.2.31-11.redhat_11.el7jws
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.2.30-4.redhat_4.el7jws
M Time-of-check Time-of-use (TOCTOU)	<0:1.2.31-10.redhat_10.el7jws
H HTTP Request Smuggling	<0:1.2.30-3.redhat_3.el7jws
H Improper Authentication	<0:1.2.30-3.redhat_3.el7jws
M Information Exposure	<0:1.2.25-3.redhat_3.el7jws
H HTTP Request Smuggling	<0:1.2.23-4.redhat_4.el7jws
H Improper Input Validation	<0:1.2.21-34.redhat_34.el7jws
H Missing Release of Resource after Effective Lifetime	<0:1.2.30-3.redhat_3.el7jws
H Out-of-bounds Read	<0:1.2.30-3.redhat_3.el7jws
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.2.17-20.redhat_20.el7jws
H Improper Certificate Validation	<0:1.2.25-4.redhat_4.el7jws
H NULL Pointer Dereference	<0:1.2.25-4.redhat_4.el7jws
M NULL Pointer Dereference	<0:1.2.25-3.redhat_3.el7jws
H HTTP Request Smuggling	<0:1.2.23-4.redhat_4.el7jws
M Improper Input Validation	<0:1.2.17-26.redhat_26.el7jws
M Improper Access Control	<0:1.2.17-26.redhat_26.el7jws
H Integer Overflow or Wraparound	<0:1.2.30-3.redhat_3.el7jws
M Deserialization of Untrusted Data	<0:1.2.26-3.redhat_3.el7jws
M Information Exposure	<0:1.2.26-3.redhat_3.el7jws
H NULL Pointer Dereference	<0:1.2.30-3.redhat_3.el7jws
H Deserialization of Untrusted Data	<0:1.2.23-5.redhat_5.el7jws
H Improper Authorization	<0:1.2.23-4.redhat_4.el7jws
M Information Exposure	<0:1.2.25-3.redhat_3.el7jws
M Information Exposure	<0:1.2.25-3.redhat_3.el7jws
M Resource Exhaustion	<0:1.2.25-2.redhat_2.el7jws
H Session Fixation	<0:1.2.23-4.redhat_4.el7jws
H Missing Required Cryptographic Step	<0:1.2.21-34.redhat_34.el7jws
H Improper Access Control	<0:1.2.23-4.redhat_4.el7jws
H Resource Exhaustion	<0:1.2.21-34.redhat_34.el7jws
H Cross-site Scripting (XSS)	<0:1.2.21-34.redhat_34.el7jws
H Resource Exhaustion	<0:1.2.21-34.redhat_34.el7jws
H Information Exposure	<0:1.2.21-34.redhat_34.el7jws

Vulnerability

Vulnerable Version

Improper Input Validation

<0:1.2.31-17.redhat_17.el7jws

Missing Required Cryptographic Step

<0:1.2.31-17.redhat_17.el7jws

HTTP Request Smuggling

<0:1.2.31-17.redhat_17.el7jws

Open Redirect

<0:1.2.31-16.redhat_16.el7jws

Excessive Iteration

<0:1.2.31-16.redhat_16.el7jws