Red Hat Security AdvisoryRHSA-2011:1800
JBoss Enterprise Application Platform 5.1.2 update
Released 2011-12-08 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS apache-cxf-2.2.12-4.patch_02.1.1.ep5.el4, cglib-2.2-5.3.ep5.el4, facelets-1.1.15-3.B1_patch_01.2.ep5.el4 +47
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES apache-cxf-2.2.12-4.patch_02.1.1.ep5.el4, cglib-2.2-5.3.ep5.el4, facelets-1.1.15-3.B1_patch_01.2.ep5.el4 +47
Fixes 2 records
Priority LOW 35
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0294 · Published 2012-11-23 · Fixed CWE-287
Priority LOW 32
message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribut…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.03074 · Published 2012-01-27 · Partial fix · 0.9.6 CWE-20
