What version of tomcat is embedded in jboss 4.2.3?

vernoncrandall Dec 2, 2008 4:55 PM

I believe JBoss AS 4.2.2 is using Tomcat 6.0.10 but the current version is 6.0.18 which includes a number of security fixes, including ones that prevent cross site scripting attacks.

1. Re: What version of tomcat is embedded in jboss 4.2.3?

jfclere Dec 3, 2008 2:54 AM (in response to vernoncrandall)

4.2.2 is using JBossWEB 2.0.1.GA and the vulnerabilities are not fixed in old community versions.

If you want to be safe use Jboss supported product.
You can also build JWB 2.0.x from the lastest CP tag and replace the jar files in you 4.2.2. (Look in the forum it is already explain somewhere).
Actions