Red Hat Security Advisory

RHSA-2012:1604

Fuse ESB Enterprise 7.1.0 update

Released 2012-12-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fuse ESB Enterprise 7.1.0

Fixes 2 records

TI-2011-03863 CVE-2011-4461 · GHSA-qxp4-27vx-xmm3

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting…

LOW 32

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.04922 Published 2011-12-30 Partial fix · 8.1.0.RC4 CWE-310

TI-2012-04543 CVE-2012-5370 · GHSA-fmmq-j7pq-f85c

JRuby computes hash values without properly restricting the ability to trigger hash…

LOW 27

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02249 Published 2012-11-28 Partial fix · 1.7.1 CWE-310