title: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP04 security update
description: Apache Tomcat's default security policy is too open JBossEAP  allows download of non-EJB class files
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0::el4