Red Hat Security AdvisoryRHSA-2013:0680
jakarta-commons-httpclient security update
Released 2013-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6
Fixes 1 record
Priority LOW 38
Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09254 · Published 2012-11-04 · Partial fix CWE-295
