Red Hat Security AdvisoryRHSA-2010:0564
jboss-seam2 security update
Released 2010-07-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS jboss-seam2-2.0.2.FP-1.ep1.24.el4, jboss-seam2-docs-2.0.2.FP-1.ep1.24.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES jboss-seam2-2.0.2.FP-1.ep1.24.el4, jboss-seam2-docs-2.0.2.FP-1.ep1.24.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server jboss-seam2-2.0.2.FP-1.ep1.24.el5, jboss-seam2-docs-2.0.2.FP-1.ep1.24.el5
Fixes 1 record
Priority CRITICAL 97KEV
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to exe…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.83397 · Published 2010-08-04 · Fixed CWE-917
