title: Red Hat Security Advisory: Red Hat JBoss Web Server 5.0 Service Pack 2 security and bug fix update
description: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins tomcat: Host name verification missing in WebSocket client
cpes: cpe:/a:redhat:jboss_enterprise_web_server:5.0::el6 cpe:/a:redhat:jboss_enterprise_web_server:5.0::el7