Red Hat Security Advisory

RHSA-2013:1853

Red Hat JBoss Operations Network 3.2.0 update

Released 2013-12-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Operations Network 3.2

Fixes 3 records

TI-2012-04824 CVE-2012-5783 · GHSA-3832-9276-x7gf

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant…

LOW 38

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09254 Published 2012-11-04 Partial fix CWE-295

TI-2012-03773 CVE-2012-4431 · GHSA-76vr-72mv-mf3q

org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36…

LOW 38

org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.09146 Published 2012-12-19 Partial fix · 6.0.36, 7.0.32 CWE-264

TI-2013-01939 CVE-2013-2172 · GHSA-r237-w2w6-jq3p

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security…

LOW 29

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the Canon…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0593 Published 2013-08-20 Partial fix · 1.4.8, 1.5.5 CWE-310