Red Hat Security AdvisoryRHSA-2009:0347
JBoss Enterprise Application Platform 4.3.0CP04 update
Released 2009-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS glassfish-jaxb-2.1.4-1.6.ep1.el4, glassfish-jaxb-javadoc-2.1.4-1.6.ep1.el4, glassfish-jsf-1.2_10-0jpp.ep1.5.ep5.el4 +29
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES glassfish-jaxb-2.1.4-1.6.ep1.el4, glassfish-jaxb-javadoc-2.1.4-1.6.ep1.el4, glassfish-jsf-1.2_10-0jpp.ep1.5.ep5.el4 +29
Fixes 1 record
Priority LOW 26
The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL fi…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01805 · Published 2009-03-09 · Fixed CWE-20
