| Package | Affected versions | Patched versions |
|---|---|---|
| org.jboss.as:jboss-as-server | ≥ 7.0.0.Alpha1, < 7.1.1.Final | 7.1.1.Final |
| jboss application server | ≥ 7.0.0, < 7.1.1 | 7.1.1 |
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free