Red Hat Security Advisory

RHSA-2010:0938

JBoss Enterprise Application Platform 4.3.0.CP09 update

Released 2010-12-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server glassfish-jaxb-2.1.4-1.17.patch04.ep1.el5, glassfish-jaxws-2.1.1-1jpp.ep1.13.el5, hibernate3-1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5 +23

Fixes 3 records

TI-2010-03532 CVE-2010-3708 · GHSA-qvq6-cw53-rmwg

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application…

LOW 38

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of cla…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03017 Published 2010-12-30 Fixed in 4.0.7 CWE-20

TI-2010-03684 CVE-2010-3878 · GHSA-m98g-p242-2jrr

Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss…

LOW 22

Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00856 Published 2010-12-30 Fixed CWE-352

TI-2010-03669 CVE-2010-3862 · GHSA-3f3h-gc4r-7vvp

The…

LOW 18

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02611 Published 2010-12-30 Fixed CWE-20