title: Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.2 security update for Tomcat 7
description: tomcat: Session fixation tomcat: CSRF token leak tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms tomcat: security manager bypass via setGlobalContext() tomcat: Usage of vulnerable FileUpload package can result in denial of service
cpes: cpe:/a:redhat:jboss_enterprise_web_server:2.1