title: Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 4 security and bug fix update
description: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins tomcat-native: Mishandled OCSP invalid response tomcat-native: Mishandled OCSP responses can allow clients to authenticate with revoked certificates
cpes: cpe:/a:redhat:jboss_enterprise_web_server:3.1::el6 cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7