Read the docs
Red Hat Security Advisory

RHSA-2013:0649

Fuse ESB Enterprise 7.1.0 update

Released 2013-03-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2012-04735 CVE-2012-5633 · GHSA-xf9f-32gh-h2w4

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x…

Priority LOW 37

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.08157 Published 2013-03-12 Partial fix · 2.5.8, 2.6.5 +1 CWE-287
TI-2013-00173 CVE-2013-0239 · GHSA-p5c5-6564-vvr8

Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext…

Priority LOW 30

Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04687 Published 2013-03-12 Partial fix · 2.5.9, 2.6.6 +1 CWE-287
TI-2012-04249 CVE-2012-5055 · GHSA-3533-rvpc-6x56

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x…

Priority LOW 27

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and m…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01952 Published 2012-12-05 Fixed in 2.0.8, 3.0.8 +1 CWE-200