CVE-2012-1094
Description
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.
| Software | From | Fixed in |
|---|---|---|
| redhat / jboss_application_server | 7.0.0 | 7.1.1 |
org.jboss.as / jboss-as-server
|
7.0.0.Alpha1 | 7.1.1.Final |