title: Red Hat Security Advisory: JBoss Enterprise Application Platform 6.1.0 update
description: Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks tomcat: Session fixation in form authenticator
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6::el5