What is RHSA-2021:0495?

RHSA-2021:0495 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update

Which CVE IDs does RHSA-2021:0495 cover?

RHSA-2021:0495 covers the following CVE IDs: CVE-2021-24122, CVE-2020-1971, CVE-2020-13943, CVE-2020-17527. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:0495?

RHSA-2021:0495 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2021:0495?

RHSA-2021:0495 affects 1 product, including: Red Hat JBoss Web Server 5.

RHSA-2021:0495MediumCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update

Vendor

Red Hat Product Security

Published

February 11, 2021

Last Modified

August 4, 2026

🔗 CVE IDs covered (4)

CVE-2021-24122 →CVE-2020-1971 →CVE-2020-13943 →CVE-2020-17527 →

📋 Description

CVE-2020-1971 — openssl: EDIPARTYNAME NULL pointer de-reference CVE-2020-13943 — tomcat: Apache Tomcat HTTP/2 Request mix-up CVE-2020-17527 — tomcat: HTTP/2 request header mix-up CVE-2021-24122 — tomcat: Information disclosure when using NTFS file system

🎯 Affected products1

Red Hat JBoss Web Server 5

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link for the update. You must be logged in to download the update. Workaround: Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (9)