Threats tagged 'bit-tomcat-2026-53434'

Red Hat JBoss Web Server 6.2.5 includes multiple security fixes addressing vulnerabilities in Apache Tomcat components such as security constraint bypass, authentication bypass, denial of service, and information disclosure. These issues affect various aspects including URL encoding in rewrite valves, access control, HTTP/2 resource allocation, and WebSocket session handling. The update replaces version 6.2.4 and is rated as having an important security impact by Red Hat.