title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
description: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests EAP: Sensitive data can be exposed at the server level in domain mode admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6::el6