title: Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 6 security and bug fix update
description: tomcat: Host name verification missing in WebSocket client tomcat: Open redirect in default servlet
cpes: cpe:/a:redhat:jboss_enterprise_web_server:3.1::el6 cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7