Red Hat Security AdvisoryRHSA-2012:0421
rhevm security and bug fix update
Released 2012-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEV-M for Servers rhevm-3.0.3_0001-3.el6, rhevm-backend-3.0.3_0001-3.el6, rhevm-config-3.0.3_0001-3.el6 +11
Fixes 2 records
Priority LOW 29
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.1 CWE-200
Priority LOW 29
The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.2 CWE-200
