Red Hat Security AdvisoryRHSA-2013:0743
JBoss Enterprise BRMS Platform 5.3.1 update
Released 2013-04-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- JBoss Enterprise BRMS Platform 5.3
Fixes 2 records
Priority LOW 37
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.08157 · Published 2013-03-12 · Partial fix · 2.5.8, 2.6.5 +1 CWE-287
Priority LOW 32
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08882 · Published 2012-09-24 · Partial fix · 2.4.9, 2.5.5 +1 CWE-20
