Red Hat Security AdvisoryRHSA-2014:0344
Red Hat JBoss Enterprise Application Platform 6.2.2 update
Released 2014-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6 for RHEL 6 Server ironjacamar-common-api-eap6-1.0.23-5.Final_redhat_5.1.ep6.el6, ironjacamar-common-impl-eap6-1.0.23-5.Final_redhat_5.1.ep6.el6, ironjacamar-common-spi-eap6-1.0.23-5.Final_redhat_5.1.ep6.el6 +47
- Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6 Server apache-cxf-2.7.10-1.redhat_1.1.ep6.el6, glassfish-jsf-eap6-2.1.27-6.redhat_8.1.ep6.el6, jboss-ejb-client-1.0.25-1.Final_redhat_1.1.ep6.el6 +13
Fixes 3 records
Priority MEDIUM 43
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.16206 · Published 2014-02-26 · Partial fix · 6.0.39, 7.0.47 +1 CWE-20
Priority LOW 30
Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.securi…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02087 · Published 2014-04-03 · Fixed CWE-264
Priority LOW 19
PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever config…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00799 · Published 2015-02-20 · Partial fix CWE-264
THREATIST.IORead the docs