Red Hat Security AdvisoryRHSA-2013:0873
JBoss Enterprise Application Platform 5.2.0 security update
Released 2013-05-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS apache-cxf-2.2.12-12.patch_07.ep5.el4, jbossws-3.1.2-14.SP15_patch_02.ep5.el4, wss4j-1.5.12-6_patch_03.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES apache-cxf-2.2.12-12.patch_07.ep5.el4, jbossws-3.1.2-14.SP15_patch_02.ep5.el4, wss4j-1.5.12-6_patch_03.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server apache-cxf-2.2.12-12.patch_07.ep5.el5, jbossws-3.1.2-14.SP15_patch_02.ep5.el5, wss4j-1.5.12-6_patch_03.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server apache-cxf-2.2.12-12.patch_07.ep5.el6, jbossws-3.1.2-14.SP15_patch_02.ep5.el6, wss4j-1.5.12-6_patch_03.ep5.el6
Fixes 1 record
Priority LOW 38
Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting,…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.06322 · Published 2013-08-19 · Partial fix · 2.5.10, 2.6.7 +1 CWE-310
