Red Hat Security Advisory

RHSA-2013:0682

jakarta-commons-httpclient security update

Released 2013-03-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Platform 5 for RHEL 5 Server jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5
Red Hat JBoss Web Platform 5 for RHEL 6 Server jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6

Fixes 1 record

TI-2012-04824 CVE-2012-5783 · GHSA-3832-9276-x7gf

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant…

LOW 38

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09254 Published 2012-11-04 Partial fix CWE-295