title: Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.7 release and security update
description: openssl: Denial of service by excessive resource usage in verifying X509 policy constraints openssl: Invalid certificate policies in leaf certificates are silently ignored openssl: Certificate policy check not enabled openssl: Possible DoS translating ASN.1 object identifiers openssl: Excessive time spent checking DH keys and parameters OpenSSL: Excessive time spent checking DH q parameter value tomcat: Open Redirect vulnerability in FORM authentication
cpes: cpe:/a:redhat:jboss_enterprise_web_server:5.7::el7 cpe:/a:redhat:jboss_enterprise_web_server:5.7::el8 cpe:/a:redhat:jboss_enterprise_web_server:5.7::el9