Red Hat Security Advisory: mod_cluster security update
mod_cluster registers and exposes the root context of a server by default, despite ROOT being in the excluded-contexts list
cpe:/a:redhat:jboss_enterprise_web_server:1::el5 cpe:/a:redhat:jboss_enterprise_web_server:1::el6