title: Red Hat Security Advisory: jbossweb security update
description: tomcat: information disclosure in authentication headers tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0::el4 cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0::el5 cpe:/a:redhat:jboss_enterprise_application_platform:4.3.0::el4 cpe:/a:redhat:jboss_enterprise_application_platform:4.3.0::el5