Red Hat Security AdvisoryRHSA-2012:1027
jbossas-web and jboss-naming security update
Released 2012-06-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Web Platform 5 for RHEL 5 Server jboss-naming-5.0.3-4.CP01_patch_01.1.ep5.el5, jbossas-web-5.1.2-10.ep5.el5, jbossas-web-client-5.1.2-10.ep5.el5 +1
- Red Hat JBoss Web Platform 5 for RHEL 6 Server jboss-naming-5.0.3-4.CP01_patch_01.2.ep5.el6, jbossas-web-5.1.2-10.ep5.el6, jbossas-web-client-5.1.2-10.ep5.el6 +1
Fixes 2 records
Priority LOW 39
The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03521 · Published 2012-11-23 · Partial fix CWE-264
Priority LOW 24
The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to…
CVSS 2.0MEDIUM 4.6· Network · Low privileges · Interaction — · EPSS 0.01604 · Published 2012-11-23 · Partial fix CWE-264