Red Hat Security Advisory

RHSA-2014:0374

Red Hat JBoss Data Grid 6.2.1 update

Released 2014-04-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Data Grid 6.2

Fixes 2 records

TI-2013-05951 CVE-2013-7285 · GHSA-f554-x222-wgf7

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not…

CRITICAL 90

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarsh…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84362 Published 2019-05-15 Partial fix · 1.4.7, 1.4.11 CWE-78

TI-2013-03752 CVE-2013-4286 · GHSA-j448-j653-r3vj

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP…

MEDIUM 43

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.16206 Published 2014-02-26 Partial fix · 6.0.39, 7.0.47 +1 CWE-20