Red Hat has issued an update for JBoss Enterprise Web Server. This fixes two weaknesses and multiple vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions and gain escalated privileges and by malicious people to disclose potentially sensitive information, bypass certain security restrictions, and cause a DoS (Denial of Service).

For more information:
SA45793
SA46013
SA46288
SA47410
SA47779

Solution
Updated packages are available via the Red Hat Customer Portal.
Original Advisory
RHSA-2012:0542-01:
https://rhn.redhat.com/errata/RHSA-2012-0542.html

RHSA-2012:0543-01:
https://rhn.redhat.com/errata/RHSA-2012-0543.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers