Red Hat Security AdvisoryRHSA-2008:0833
JBoss Enterprise Application Platform 4.2.0CP04 security update
Released 2008-09-22 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 AS glassfish-javamail-1.4.0-0jpp.ep1.10.el4, hibernate3-1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4, hibernate3-annotations-3.2.1-4.GA_CP02.1jpp.ep1.7.el4 +12
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 ES glassfish-javamail-1.4.0-0jpp.ep1.10.el4, hibernate3-1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4, hibernate3-annotations-3.2.1-4.GA_CP02.1jpp.ep1.7.el4 +12
Fixes 2 records
Priority LOW 36
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify loggin…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.05156 · Published 2007-12-27 · Fixed CWE-264
Priority LOW 23
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01621 · Published 2008-09-23 · Fixed CWE-16
