Red Hat Security Advisory

RHSA-2009:0348

JBoss Enterprise Application Platform 4.2.0CP06 update

Released 2009-03-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 5 Server glassfish-jsf-1.2_10-0jpp.ep1.5.ep5.el5, hibernate3-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5, hibernate3-javadoc-1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5 +21

Fixes 1 record

TI-2009-00027 CVE-2009-0027 · GHSA-5xfj-v547-vccj

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or…

LOW 26

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL fi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01805 Published 2009-03-09 Fixed CWE-20