Red Hat Security AdvisoryRHSA-2013:0249
JBoss Enterprise Application Platform 4.3.0 CP10 security update
Released 2013-02-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS jbossas-4.3.0-12.GA_CP10_patch_01.1.ep1.el4, jbossas-client-4.3.0-12.GA_CP10_patch_01.1.ep1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES jbossas-4.3.0-12.GA_CP10_patch_01.1.ep1.el4, jbossas-client-4.3.0-12.GA_CP10_patch_01.1.ep1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server jbossas-4.3.0-12.GA_CP10_patch_01.1.ep1.el5, jbossas-client-4.3.0-12.GA_CP10_patch_01.1.ep1.el5
Fixes 1 record
Priority LOW 37
The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote at…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02344 · Published 2013-03-12 · Partial fix CWE-264
