Red Hat Security AdvisoryRHSA-2013:0257
JBoss Enterprise Application Platform 5.2.0 security update
Released 2013-02-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS apache-cxf-2.2.12-10.patch_06.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES apache-cxf-2.2.12-10.patch_06.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server apache-cxf-2.2.12-10.patch_06.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server apache-cxf-2.2.12-10.patch_06.ep5.el6
Fixes 2 records
Priority LOW 37
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.08157 · Published 2013-03-12 · Partial fix · 2.5.8, 2.6.5 +1 CWE-287
Priority LOW 32
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08882 · Published 2012-09-24 · Partial fix · 2.4.9, 2.5.5 +1 CWE-20
