{
   affected: [],
   aliases: [
      "CVE-2022-24963",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-190",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2023-01-31T16:15:00Z",
      severity: "CRITICAL",
   },
   details: "Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.",
   id: "GHSA-6rr3-mpxq-hv4x",
   modified: "2025-03-27T15:30:36Z",
   published: "2023-01-31T18:30:22Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2022-24963",
      },
      {
         type: "WEB",
         url: "https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9",
      },
      {
         type: "WEB",
         url: "https://security.netapp.com/advisory/ntap-20230908-0008",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Red Hat JBoss Core Services Apache HTTP Server 2.4.57 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.51 Service Pack 2, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* apr-util: integer overflow/wraparound in apr_encode (CVE-2022-24963)\n\n* apr-util: Windows out-of-bounds write in apr_socket_sendv function (CVE-2022-28331)\n\n* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)\n\n* httpd: mod_proxy: HTTP response splitting (CVE-2022-37436)\n\n* mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass (CVE-2022-48279)\n\n* modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass (CVE-2023-24021)\n\n* httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)\n\n* curl: use after free in SSH sha256 fingerprint check (CVE-2023-28319)\n\n* curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321)\n\n* libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)\n\n* libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)\n\n* curl: more POST-after-PUT confusion (CVE-2023-28322)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2023:4628",
            url: "https://access.redhat.com/errata/RHSA-2023:4628",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "2161773",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2161773",
         },
         {
            category: "external",
            summary: "2161777",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2161777",
         },
         {
            category: "external",
            summary: "2163615",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2163615",
         },
         {
            category: "external",
            summary: "2163622",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2163622",
         },
         {
            category: "external",
            summary: "2169465",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2169465",
         },
         {
            category: "external",
            summary: "2172556",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2172556",
         },
         {
            category: "external",
            summary: "2176211",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2176211",
         },
         {
            category: "external",
            summary: "2185984",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2185984",
         },
         {
            category: "external",
            summary: "2185994",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2185994",
         },
         {
            category: "external",
            summary: "2196778",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2196778",
         },
         {
            category: "external",
            summary: "2196786",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2196786",
         },
         {
            category: "external",
            summary: "2196793",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2196793",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4628.json",
         },
      ],
      title: "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update",
      tracking: {
         current_release_date: "2025-03-15T03:58:19+00:00",
         generator: {
            date: "2025-03-15T03:58:19+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.4.1",
            },
         },
         id: "RHSA-2023:4628",
         initial_release_date: "2023-08-15T17:37:09+00:00",
         revision_history: [
            {
               date: "2023-08-15T17:37:09+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2023-08-15T17:37:09+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2025-03-15T03:58:19+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Text-Only JBCS",
                        product: {
                           name: "Text-Only JBCS",
                           product_id: "Text-Only JBCS",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_core_services:1",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat JBoss Core Services",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-24963",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         discovery_date: "2023-02-13T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2169465",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in Apache Portable Runtime (APR). This issue may allow a malicious attacker to write beyond the bounds of a buffer.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "apr: integer overflow/wraparound in apr_encode",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Versions of \"apr-util\" shipped with Red Hat Enterprise Linux-6, 7, 8, and 9 are not affected. \"apr_encode_*\" API, which contains the affected code was added in apr-utils v1.7.0, whereas, RHEL ships apr-util v1.6.1 and lower.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2022-24963",
            },
            {
               category: "external",
               summary: "RHBZ#2169465",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2169465",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2022-24963",
               url: "https://www.cve.org/CVERecord?id=CVE-2022-24963",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-24963",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2022-24963",
            },
            {
               category: "external",
               summary: "https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9",
               url: "https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9",
            },
         ],
         release_date: "2023-01-31T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "apr: integer overflow/wraparound in apr_encode",
      },
      {
         cve: "CVE-2022-28331",
         cwe: {
            id: "CWE-787",
            name: "Out-of-bounds Write",
         },
         discovery_date: "2023-02-22T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2172556",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in Apache Portable Runtime, affecting versions <= 1.7.0. This issue may allow a malicious user to write beyond the end of a stack buffer and cause an integer overflow. This affects Windows environments.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "apr: Windows out-of-bounds write in apr_socket_sendv function",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2022-28331",
            },
            {
               category: "external",
               summary: "RHBZ#2172556",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2172556",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2022-28331",
               url: "https://www.cve.org/CVERecord?id=CVE-2022-28331",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-28331",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2022-28331",
            },
            {
               category: "external",
               summary: "https://lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r",
               url: "https://lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r",
            },
         ],
         release_date: "2023-01-31T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "apr: Windows out-of-bounds write in apr_socket_sendv function",
      },
      {
         cve: "CVE-2022-36760",
         cwe: {
            id: "CWE-444",
            name: "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')",
         },
         discovery_date: "2023-01-17T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2161777",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in the mod_proxy_ajp module of httpd. The connection is not closed when there is an invalid Transfer-Encoding header, allowing an attacker to smuggle requests to the AJP server, where it forwards requests.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "httpd: mod_proxy_ajp: Possible request smuggling",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This flaw only affects configurations with mod_proxy_ajp loaded and with an AJP backend configured. If there is no proxy configured to an AJP backend the server is not affected and no further mitigation is needed. For more information about the mitigation, check the mitigation section below.\n\nThe httpd mod_proxy_ajp module is enabled by default on Red Hat Enterprise Linux 6, 7, 8, 9, and in RHSCL. However, there are no directives forwarding requests using the AJP protocol.\n\nThis flaw has been rated as having a security impact of moderate, and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2022-36760",
            },
            {
               category: "external",
               summary: "RHBZ#2161777",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2161777",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2022-36760",
               url: "https://www.cve.org/CVERecord?id=CVE-2022-36760",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-36760",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2022-36760",
            },
            {
               category: "external",
               summary: "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-36760",
               url: "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-36760",
            },
         ],
         release_date: "2023-01-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "CHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "httpd: mod_proxy_ajp: Possible request smuggling",
      },
      {
         cve: "CVE-2022-37436",
         cwe: {
            id: "CWE-113",
            name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')",
         },
         discovery_date: "2023-01-17T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2161773",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in the mod_proxy module of httpd. A malicious backend can cause the response headers to be truncated because they are not cleaned when an error is found while reading them, resulting in some headers being incorporated into the response body and not being interpreted by a client.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "httpd: mod_proxy: HTTP response splitting",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This flaw is only exploitable via bad headers generated by a malicious backend or a malicious application.\n\nhttpd as shipped in Red Hat Enterprise Linux 7, 8, 9 and in RHSCL is vulnerable to this flaw. httpd as shipped in Red Hat Enterprise Linux 6 is not affected.\n\nThis flaw has been rated as having a security impact of moderate, and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2022-37436",
            },
            {
               category: "external",
               summary: "RHBZ#2161773",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2161773",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2022-37436",
               url: "https://www.cve.org/CVERecord?id=CVE-2022-37436",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-37436",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2022-37436",
            },
            {
               category: "external",
               summary: "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-37436",
               url: "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-37436",
            },
         ],
         release_date: "2023-01-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. It's recommended to update the affected packages as soon as an update is available.",
               product_ids: [
                  "Text-Only JBCS",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "httpd: mod_proxy: HTTP response splitting",
      },
      {
         cve: "CVE-2022-48279",
         cwe: {
            id: "CWE-1389",
            name: "Incorrect Parsing of Numbers with Different Radices",
         },
         discovery_date: "2023-01-24T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2163622",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in ModSecurity. This issue occurs when HTTP multipart requests are incorrectly parsed and could bypass the Web Application Firewall. NOTE: This is related to CVE-2022-39956, but can be considered independent changes to the ModSecurity (C language) codebase.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2022-48279",
            },
            {
               category: "external",
               summary: "RHBZ#2163622",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2163622",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2022-48279",
               url: "https://www.cve.org/CVERecord?id=CVE-2022-48279",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-48279",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2022-48279",
            },
         ],
         release_date: "2023-01-20T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass",
      },
      {
         cve: "CVE-2023-24021",
         cwe: {
            id: "CWE-402",
            name: "Transmission of Private Resources into a New Sphere ('Resource Leak')",
         },
         discovery_date: "2023-01-24T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2163615",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in ModSecurity. This issue occurs when FILES_TMP_CONTENT lacks complete content, which can lead to a Web Application Firewall bypass.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-24021",
            },
            {
               category: "external",
               summary: "RHBZ#2163615",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2163615",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-24021",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-24021",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-24021",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-24021",
            },
         ],
         release_date: "2023-01-20T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass",
      },
      {
         cve: "CVE-2023-27522",
         cwe: {
            id: "CWE-113",
            name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')",
         },
         discovery_date: "2023-03-07T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2176211",
            },
         ],
         notes: [
            {
               category: "description",
               text: "An HTTP Response Smuggling vulnerability was found in the Apache HTTP Server via mod_proxy_uwsgi. This security issue occurs when special characters in the origin response header can truncate or split the response forwarded to the client.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "httpd: mod_proxy_uwsgi HTTP response splitting",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "The HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi has been categorized as moderate severity for Red Hat Enterprise Linux due to several technical factors. While the potential impact of this vulnerability is significant, its exploitation requires specific conditions, including the presence of mod_proxy_uwsgi and the ability to inject specially crafted headers into requests. Additionally, successful exploitation depends on the specific configuration of the server and the network environment. Furthermore, the vulnerability primarily affects the integrity and reliability of HTTP responses, rather than directly leading to remote code execution or unauthorized access. Therefore, the likelihood of exploitation and the potential impact on affected systems have been evaluated as moderate, warranting attention and remediation but not categorized as important.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-27522",
            },
            {
               category: "external",
               summary: "RHBZ#2176211",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2176211",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-27522",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-27522",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-27522",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-27522",
            },
            {
               category: "external",
               summary: "https://httpd.apache.org/security/vulnerabilities_24.html",
               url: "https://httpd.apache.org/security/vulnerabilities_24.html",
            },
         ],
         release_date: "2023-03-07T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "Text-Only JBCS",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "httpd: mod_proxy_uwsgi HTTP response splitting",
      },
      {
         acknowledgments: [
            {
               names: [
                  "Wei Chong Tan",
                  "Daniel Stenberg",
               ],
            },
         ],
         cve: "CVE-2023-28319",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         discovery_date: "2023-05-10T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2196778",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A use-after-free flaw was found in the Curl package. This flaw risks inserting sensitive heap-based data into the error message that users might see or is otherwise leaked and revealed.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "curl: use after free in SSH sha256 fingerprint check",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This vulnerability does not affect the Curl package as shipped in Red Hat Enterprise Linux 6, 7, 8 and 9.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-28319",
            },
            {
               category: "external",
               summary: "RHBZ#2196778",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2196778",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-28319",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-28319",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-28319",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-28319",
            },
            {
               category: "external",
               summary: "https://curl.se/docs/CVE-2023-28319.html",
               url: "https://curl.se/docs/CVE-2023-28319.html",
            },
         ],
         release_date: "2023-05-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "curl: use after free in SSH sha256 fingerprint check",
      },
      {
         acknowledgments: [
            {
               names: [
                  "Hiroki Kurosawa",
                  "Daniel Stenberg",
               ],
            },
         ],
         cve: "CVE-2023-28321",
         cwe: {
            id: "CWE-295",
            name: "Improper Certificate Validation",
         },
         discovery_date: "2023-05-10T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2196786",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in the Curl package. An incorrect International Domain Name (IDN) wildcard match may lead to improper certificate validation.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "curl: IDN wildcard match may lead to Improper Cerificate Validation",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-28321",
            },
            {
               category: "external",
               summary: "RHBZ#2196786",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2196786",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-28321",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-28321",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-28321",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-28321",
            },
            {
               category: "external",
               summary: "https://curl.se/docs/CVE-2023-28321.html",
               url: "https://curl.se/docs/CVE-2023-28321.html",
            },
         ],
         release_date: "2023-05-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "curl: IDN wildcard match may lead to Improper Cerificate Validation",
      },
      {
         acknowledgments: [
            {
               names: [
                  "Hiroki Kurosawa",
                  "Daniel Stenberg",
               ],
            },
         ],
         cve: "CVE-2023-28322",
         cwe: {
            id: "CWE-440",
            name: "Expected Behavior Violation",
         },
         discovery_date: "2023-05-10T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2196793",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A use-after-free flaw was found in the Curl package. This issue may lead to unintended information disclosure by the application.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "curl: more POST-after-PUT confusion",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-28322",
            },
            {
               category: "external",
               summary: "RHBZ#2196793",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2196793",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-28322",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-28322",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-28322",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-28322",
            },
            {
               category: "external",
               summary: "https://curl.se/docs/CVE-2023-28322.html",
               url: "https://curl.se/docs/CVE-2023-28322.html",
            },
         ],
         release_date: "2023-05-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 3.7,
                  baseSeverity: "LOW",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "curl: more POST-after-PUT confusion",
      },
      {
         cve: "CVE-2023-28484",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         discovery_date: "2023-04-11T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2185994",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A NULL pointer dereference vulnerability was found in libxml2. This issue occurs when parsing (invalid) XML schemas.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "libxml2: NULL dereference in xmlSchemaFixupComplexType",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-28484",
            },
            {
               category: "external",
               summary: "RHBZ#2185994",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2185994",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-28484",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-28484",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-28484",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-28484",
            },
         ],
         release_date: "2023-04-11T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "libxml2: NULL dereference in xmlSchemaFixupComplexType",
      },
      {
         cve: "CVE-2023-29469",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         discovery_date: "2023-04-11T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2185984",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in libxml2. This issue occurs when hashing empty strings which aren't null-terminated, xmlDictComputeFastKey could produce inconsistent results, which may lead to various logic or memory errors, including double free errors.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "libxml2: Hashing of empty dict strings isn't deterministic",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "Text-Only JBCS",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-29469",
            },
            {
               category: "external",
               summary: "RHBZ#2185984",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2185984",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-29469",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-29469",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-29469",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-29469",
            },
         ],
         release_date: "2023-04-11T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-08-15T17:37:09+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "Text-Only JBCS",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4628",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "Text-Only JBCS",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "libxml2: Hashing of empty dict strings isn't deterministic",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update is now available for Red Hat JBoss Web Server 5.7.4 on Red Hat Enterprise Linux versions 7, 8, and 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.7.4 serves as a replacement for Red Hat JBoss Web Server 5.7.3. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References section.\n\nSecurity Fix(es):\n\n* apr: integer overflow/wraparound in apr_encode (CVE-2022-24963)\n\n* Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998)\n\n* tomcat: not including the secure attribute causes information disclosure (CVE-2023-28708)\n\n* tomcat: Fix for CVE-2023-24998 was incomplete (CVE-2023-28709)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2023:4909",
            url: "https://access.redhat.com/errata/RHSA-2023:4909",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "2169465",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2169465",
         },
         {
            category: "external",
            summary: "2172298",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2172298",
         },
         {
            category: "external",
            summary: "2180856",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2180856",
         },
         {
            category: "external",
            summary: "2210321",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2210321",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4909.json",
         },
      ],
      title: "Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.4 release and security update",
      tracking: {
         current_release_date: "2024-12-06T12:21:28+00:00",
         generator: {
            date: "2024-12-06T12:21:28+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.2",
            },
         },
         id: "RHSA-2023:4909",
         initial_release_date: "2023-09-04T12:19:35+00:00",
         revision_history: [
            {
               date: "2023-09-04T12:19:35+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2023-09-04T12:19:35+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-12-06T12:21:28+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
                        product: {
                           name: "Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
                           product_id: "7Server-JWS-5.7",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_enterprise_web_server:5.7::el7",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat JBoss Web Server 5.7 for RHEL 8",
                        product: {
                           name: "Red Hat JBoss Web Server 5.7 for RHEL 8",
                           product_id: "8Base-JWS-5.7",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_enterprise_web_server:5.7::el8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat JBoss Web Server 5.7 for RHEL 9",
                        product: {
                           name: "Red Hat JBoss Web Server 5.7 for RHEL 9",
                           product_id: "9Base-JWS-5.7",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_enterprise_web_server:5.7::el9",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat JBoss Web Server",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                        product: {
                           name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                           product_id: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1.el7jws?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                        product: {
                           name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                           product_id: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native@1.2.31-15.redhat_15.el7jws?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                        product: {
                           name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                           product_id: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1.el8jws?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                        product: {
                           name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                           product_id: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native@1.2.31-15.redhat_15.el8jws?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                        product: {
                           name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                           product_id: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1.el9jws?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                        product: {
                           name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                           product_id: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native@1.2.31-15.redhat_15.el9jws?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-java-jdk11@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-java-jdk8@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-lib@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                        product: {
                           name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_id: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.62-15.redhat_00013.1.el7jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-lib@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                        product: {
                           name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_id: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.62-15.redhat_00013.1.el8jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-lib@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                        product: {
                           name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_id: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.62-15.redhat_00013.1.el9jws?arch=noarch",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                        product: {
                           name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                           product_id: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native@1.2.31-15.redhat_15.el7jws?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                        product: {
                           name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                           product_id: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.31-15.redhat_15.el7jws?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                        product: {
                           name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                           product_id: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native@1.2.31-15.redhat_15.el8jws?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                        product: {
                           name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                           product_id: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.31-15.redhat_15.el8jws?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                        product: {
                           name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                           product_id: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native@1.2.31-15.redhat_15.el9jws?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                        product: {
                           name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                           product_id: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.31-15.redhat_15.el9jws?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
            },
            product_reference: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
            },
            product_reference: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
            },
            product_reference: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
            },
            product_reference: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 7 Server",
               product_id: "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            },
            product_reference: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
            relates_to_product_reference: "7Server-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
            },
            product_reference: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
            },
            product_reference: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
            },
            product_reference: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
            },
            product_reference: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 8",
               product_id: "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            },
            product_reference: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
            relates_to_product_reference: "8Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
            },
            product_reference: "jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
            },
            product_reference: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64 as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
            },
            product_reference: "jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64 as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
            },
            product_reference: "jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch as a component of Red Hat JBoss Web Server 5.7 for RHEL 9",
               product_id: "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            },
            product_reference: "jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            relates_to_product_reference: "9Base-JWS-5.7",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-24963",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         discovery_date: "2023-02-13T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2169465",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in Apache Portable Runtime (APR). This issue may allow a malicious attacker to write beyond the bounds of a buffer.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "apr: integer overflow/wraparound in apr_encode",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Versions of \"apr-util\" shipped with Red Hat Enterprise Linux-6, 7, 8, and 9 are not affected. \"apr_encode_*\" API, which contains the affected code was added in apr-utils v1.7.0, whereas, RHEL ships apr-util v1.6.1 and lower.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
            ],
            known_not_affected: [
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2022-24963",
            },
            {
               category: "external",
               summary: "RHBZ#2169465",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2169465",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2022-24963",
               url: "https://www.cve.org/CVERecord?id=CVE-2022-24963",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-24963",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2022-24963",
            },
            {
               category: "external",
               summary: "https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9",
               url: "https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9",
            },
         ],
         release_date: "2023-01-31T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-09-04T12:19:35+00:00",
               details: "Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4909",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "apr: integer overflow/wraparound in apr_encode",
      },
      {
         cve: "CVE-2023-24998",
         cwe: {
            id: "CWE-770",
            name: "Allocation of Resources Without Limits or Throttling",
         },
         discovery_date: "2023-02-20T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2172298",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in Apache Commons FileUpload, where it does not limit the number of parts being processed in a request. This issue may allow an attacker to use a malicious upload or series of uploads to trigger a denial of service.\r\n\r\nWhile Red Hat Satellite relies upon Apache Tomcat, it does not directly ship it. Tomcat is shipped with Red Hat Enterprise Linux and consumed by the Candlepin component of Satellite. Red Hat Satellite users are therefore advised to check the impact state of Red Hat Enterprise Linux, since any necessary fixes will be distributed through the platform.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "FileUpload: FileUpload DoS with excessive parts",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            ],
            known_not_affected: [
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-24998",
            },
            {
               category: "external",
               summary: "RHBZ#2172298",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2172298",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-24998",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-24998",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-24998",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-24998",
            },
            {
               category: "external",
               summary: "https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5",
               url: "https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5",
            },
         ],
         release_date: "2023-02-20T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-09-04T12:19:35+00:00",
               details: "Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4909",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "FileUpload: FileUpload DoS with excessive parts",
      },
      {
         cve: "CVE-2023-28708",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         discovery_date: "2023-03-22T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2180856",
            },
         ],
         notes: [
            {
               category: "description",
               text: "\nWhen using the RemoteIpFilter with requests received from a    reverse proxy via HTTP that include the X-Forwarded-Proto    header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel.\n\n\n\n\n\n\n\n",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: not including the secure attribute causes information disclosure",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "CVE-2023-28708 only potentially impacts a Tomcat configuration using a RemoteIpFilter behind a proxy or loadbalancer that sets an X-Forwarded-Proto request header with a value of https. If you do not use RemoteIpFilter in such a configuration, then the vulnerability would not have any impact on you\n\nRed Hat Satellite does not include the affected Apache Tomcat, however, Tomcat is shipped with Red Hat Enterprise Linux and consumed by the Candlepin component of Satellite. Red Hat Satellite users are therefore advised to check the impact state of Red Hat Enterprise Linux, since any necessary fixes will be distributed through the platform.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            ],
            known_not_affected: [
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-28708",
            },
            {
               category: "external",
               summary: "RHBZ#2180856",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2180856",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-28708",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-28708",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-28708",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-28708",
            },
            {
               category: "external",
               summary: "https://bz.apache.org/bugzilla/show_bug.cgi?id=66471",
               url: "https://bz.apache.org/bugzilla/show_bug.cgi?id=66471",
            },
            {
               category: "external",
               summary: "https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67",
               url: "https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67",
            },
         ],
         release_date: "2023-03-22T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-09-04T12:19:35+00:00",
               details: "Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4909",
            },
            {
               category: "workaround",
               details: "For possible impact and workaround, please refer to: https://access.redhat.com/solutions/7004796",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat: not including the secure attribute causes information disclosure",
      },
      {
         cve: "CVE-2023-28709",
         cwe: {
            id: "CWE-193",
            name: "Off-by-one Error",
         },
         discovery_date: "2023-05-26T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2210321",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in Apache Tomcat due to an incomplete fix for CVE-2023-24998, which aims to limit the uploaded request parts that can be bypassed in a request. This issue may allow an attacker to use a malicious upload or series of uploads to trigger a denial of service.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: Fix for CVE-2023-24998 was incomplete",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "The impact for this flaw is considered moderate to match the Apache Software Foundation impact, considering the non-default configuration in CVE description.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
            ],
            known_not_affected: [
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
               "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
               "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
               "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
               "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-28709",
            },
            {
               category: "external",
               summary: "RHBZ#2210321",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2210321",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-28709",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-28709",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-28709",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-28709",
            },
            {
               category: "external",
               summary: "https://lists.apache.org/thread/7wvxonzwb7k9hx9jt3q33cmy7j97jo3j",
               url: "https://lists.apache.org/thread/7wvxonzwb7k9hx9jt3q33cmy7j97jo3j",
            },
         ],
         release_date: "2023-05-22T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-09-04T12:19:35+00:00",
               details: "Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4909",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk11-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-java-jdk8-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.src",
                  "7Server-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el7jws.x86_64",
                  "7Server-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "7Server-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el7jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.src",
                  "8Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el8jws.x86_64",
                  "8Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "8Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el8jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-0:9.0.62-15.redhat_00013.1.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-admin-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-docs-webapp-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-el-3.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-javadoc-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-jsp-2.3-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-lib-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.src",
                  "9Base-JWS-5.7:jws5-tomcat-native-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-native-debuginfo-0:1.2.31-15.redhat_15.el9jws.x86_64",
                  "9Base-JWS-5.7:jws5-tomcat-selinux-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-servlet-4.0-api-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
                  "9Base-JWS-5.7:jws5-tomcat-webapps-0:9.0.62-15.redhat_00013.1.el9jws.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat: Fix for CVE-2023-24998 was incomplete",
      },
   ],
}