{
  "threat_severity" : "Moderate",
  "public_date" : "2014-02-25T00:00:00Z",
  "bugzilla" : {
    "description" : "tomcat: multiple content-length header poisoning flaws",
    "id" : "1069921",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1069921"
  },
  "cvss" : {
    "cvss_base_score" : "5.8",
    "cvss_scoring_vector" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
    "status" : "verified"
  },
  "details" : [ "Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a \"Transfer-Encoding: chunked\" header.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.", "It was found that when Tomcat / JBoss Web processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat / JBoss Web would incorrectly handle the request. A remote attacker could use this flaw to poison a web cache, perform cross-site scripting (XSS) attacks, or obtain sensitive information from other requests." ],
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2014-04-23T00:00:00Z",
    "advisory" : "RHSA-2014:0429",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "tomcat6-0:6.0.24-64.el6_5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2014-06-10T00:00:00Z",
    "advisory" : "RHSA-2014:0686",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "tomcat-0:7.0.42-5.el7_0"
  }, {
    "product_name" : "Red Hat JBoss BPMS 6.0",
    "release_date" : "2014-04-03T00:00:00Z",
    "advisory" : "RHSA-2014:0373",
    "cpe" : "cpe:/a:redhat:jboss_bpms:6.0",
    "package" : "jbossweb"
  }, {
    "product_name" : "Red Hat JBoss BRMS 6.0",
    "release_date" : "2014-04-03T00:00:00Z",
    "advisory" : "RHSA-2014:0373",
    "cpe" : "cpe:/a:redhat:jboss_brms:6.0",
    "package" : "jbossweb"
  }, {
    "product_name" : "Red Hat JBoss Data Grid 6.2",
    "release_date" : "2014-04-03T00:00:00Z",
    "advisory" : "RHSA-2014:0374",
    "cpe" : "cpe:/a:redhat:jboss_data_grid:6.2.1",
    "package" : "jbossweb"
  }, {
    "product_name" : "Red Hat JBoss Data Virtualization 6.0",
    "release_date" : "2014-04-30T00:00:00Z",
    "advisory" : "RHSA-2014:0458",
    "cpe" : "cpe:/a:redhat:jboss_data_virtualization:6.0",
    "package" : "jbossweb"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0345",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6.2.2",
    "package" : "jbossweb"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "apache-cxf-0:2.7.10-1.redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "glassfish-jsf-eap6-0:2.1.27-6.redhat_8.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-ejb-client-0:1.0.25-1.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-jsf-api_2.1_spec-0:2.1.27-2.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-metadata-0:7.0.9-1.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-remote-naming-0:1.0.8-1.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-remoting3-0:3.2.19-1.GA_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-security-negotiation-0:2.2.7-1.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jbossws-cxf-0:4.2.4-1.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "picketbox-0:4.0.19-4.SP4_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "wss4j-0:1.6.14-2.redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "apache-cxf-0:2.7.10-1.redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "glassfish-jsf-eap6-0:2.1.27-6.redhat_8.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-ejb-client-0:1.0.25-1.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-jsf-api_2.1_spec-0:2.1.27-2.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-metadata-0:7.0.9-1.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-remote-naming-0:1.0.8-1.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-remoting3-0:3.2.19-1.GA_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-security-negotiation-0:2.2.7-1.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossws-cxf-0:4.2.4-1.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "picketbox-0:4.0.19-4.SP4_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "wss4j-0:1.6.14-2.redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "ironjacamar-eap6-0:1.0.23-5.Final_redhat_5.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-appclient-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-cli-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-client-all-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-clustering-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-cmp-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-configadmin-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-connector-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-controller-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-controller-client-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jbossas-core-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-core-security-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-deployment-repository-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-deployment-scanner-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-domain-http-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-domain-management-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-ee-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-ee-deployment-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-ejb3-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-embedded-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-host-controller-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jacorb-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jbossas-javadocs-0:7.3.2-2.1.Final_redhat_2.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jaxr-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jaxrs-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jdr-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jmx-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jpa-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jsf-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-jsr77-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-logging-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-mail-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-management-client-content-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-messaging-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-modcluster-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jbossas-modules-eap-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-naming-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-network-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-osgi-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-osgi-configadmin-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-osgi-service-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-platform-mbean-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-pojo-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-process-controller-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jbossas-product-eap-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-protocol-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-remoting-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-sar-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-security-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-server-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-system-jmx-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-threads-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-transactions-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-version-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-web-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-webservices-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-weld-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-as-xts-0:7.3.2-2.Final_redhat_2.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-el-api_2.2_spec-0:1.0.4-2.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jboss-modules-0:1.3.3-1.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 5",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0343",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5",
    "package" : "jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "ironjacamar-eap6-0:1.0.23-5.Final_redhat_5.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-appclient-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-cli-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-client-all-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-clustering-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-cmp-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-configadmin-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-connector-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-controller-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-controller-client-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-core-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-core-security-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-deployment-repository-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-deployment-scanner-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-domain-http-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-domain-management-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-ee-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-ee-deployment-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-ejb3-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-embedded-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-host-controller-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jacorb-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-javadocs-0:7.3.2-2.1.Final_redhat_2.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jaxr-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jaxrs-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jdr-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jmx-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jpa-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jsf-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jsr77-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-logging-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-mail-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-management-client-content-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-messaging-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-modcluster-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-modules-eap-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-naming-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-network-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-osgi-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-osgi-configadmin-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-osgi-service-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-platform-mbean-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-pojo-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-process-controller-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-product-eap-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-protocol-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-remoting-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-sar-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-security-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-server-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-system-jmx-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-threads-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-transactions-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-version-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-web-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-webservices-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-weld-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-xts-0:7.3.2-2.Final_redhat_2.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-el-api_2.2_spec-0:1.0.4-2.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-modules-0:1.3.3-1.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6 for RHEL 6",
    "release_date" : "2014-03-31T00:00:00Z",
    "advisory" : "RHSA-2014:0344",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Web Server 2 for RHEL 5",
    "release_date" : "2014-05-21T00:00:00Z",
    "advisory" : "RHSA-2014:0525",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:2::el5",
    "package" : "tomcat6-0:6.0.37-19_patch_04.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Web Server 2 for RHEL 5",
    "release_date" : "2014-05-21T00:00:00Z",
    "advisory" : "RHSA-2014:0526",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:2::el5",
    "package" : "tomcat7-0:7.0.40-13_patch_02.ep6.el5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Web Server 2 for RHEL 6",
    "release_date" : "2014-05-21T00:00:00Z",
    "advisory" : "RHSA-2014:0525",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:2::el6",
    "package" : "tomcat6-0:6.0.37-27_patch_04.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Web Server 2 for RHEL 6",
    "release_date" : "2014-05-21T00:00:00Z",
    "advisory" : "RHSA-2014:0526",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:2::el6",
    "package" : "tomcat7-0:7.0.40-9_patch_02.ep6.el6"
  }, {
    "product_name" : "Red Hat JBoss Fuse Service Works 6.0",
    "release_date" : "2014-04-30T00:00:00Z",
    "advisory" : "RHSA-2014:0459",
    "cpe" : "cpe:/a:redhat:jboss_fuse_service_works:6.0",
    "package" : "jbossweb"
  }, {
    "product_name" : "Red Hat JBoss Operations Network 3.2",
    "release_date" : "2014-05-15T00:00:00Z",
    "advisory" : "RHSA-2014:0511",
    "cpe" : "cpe:/a:redhat:jboss_operations_network:3.2.1"
  }, {
    "product_name" : "Red Hat JBoss Portal 6.2",
    "release_date" : "2015-05-14T00:00:00Z",
    "advisory" : "RHSA-2015:1009",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_portal_platform:6.2",
    "package" : "jbossweb"
  }, {
    "product_name" : "Red Hat JBoss Web Server 2.0",
    "release_date" : "2014-05-21T00:00:00Z",
    "advisory" : "RHSA-2014:0527",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:2.0",
    "package" : "tomcat7"
  }, {
    "product_name" : "Red Hat JBoss Web Server 2.0",
    "release_date" : "2014-05-21T00:00:00Z",
    "advisory" : "RHSA-2014:0528",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:2.0",
    "package" : "tomcat6"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 5",
    "fix_state" : "Will not fix",
    "package_name" : "tomcat5",
    "cpe" : "cpe:/o:redhat:enterprise_linux:5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 5",
    "fix_state" : "Will not fix",
    "package_name" : "jbossweb",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:5"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Web Server 1",
    "fix_state" : "Will not fix",
    "package_name" : "tomcat5",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:1"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Web Server 1",
    "fix_state" : "Will not fix",
    "package_name" : "tomcat6",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:1"
  }, {
    "product_name" : "Red Hat JBoss Operations Network 3",
    "fix_state" : "Affected",
    "package_name" : "jbossweb",
    "cpe" : "cpe:/a:redhat:jboss_operations_network:3"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2013-4286\nhttps://nvd.nist.gov/vuln/detail/CVE-2013-4286" ],
  "name" : "CVE-2013-4286",
  "csaw" : false
}