Red Hat Security AdvisoryRHSA-2013:0231
JBoss Enterprise Application Platform 6.0.1 security update
Released 2013-02-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server jboss-as-domain-management-7.1.3-5.Final_redhat_5.ep6.el5, picketbox-4.0.14-3.Final_redhat_3.ep6.el5
- Red Hat JBoss Enterprise Application Platform 6 for RHEL 6 Server jboss-as-domain-management-7.1.3-5.Final_redhat_5.ep6.el6, picketbox-4.0.14-3.Final_redhat_3.ep6.el6
Fixes 1 record
Priority LOW 37
The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote at…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02344 · Published 2013-03-12 · Partial fix CWE-264