Red Hat Security Advisory

RHSA-2013:1786

Red Hat JBoss Enterprise Application Platform 6.2.0 update

Released 2013-12-04 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6 for RHEL 6 Server antlr-eap6-2.7.7-17.redhat_4.1.ep6.el6, apache-commons-beanutils-1.8.3-13.redhat_6.1.ep6.el6, apache-commons-cli-1.2-8.redhat_3.1.ep6.el6 +47

Fixes 2 records

TI-2013-01902 CVE-2013-2133 · GHSA-2579-mjx2-r625

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise…

LOW 28

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, whi…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01809 Published 2013-12-06 Partial fix CWE-264

TI-2013-01806 CVE-2013-2035 · GHSA-49j7-qghp-5wj8

Race condition in…

LOW 21

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwri…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00589 Published 2013-08-28 Partial fix · 1.8 CWE-94