Red Hat, Inc. jbossas

• CVE-2017-12149 Critical 9.8 Exploited In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes 90.7%