Red Hat Security AdvisoryRHSA-2014:0591
Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Released 2014-06-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS xalan-j2-2.7.1-12_patch_08.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES xalan-j2-2.7.1-12_patch_08.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server xalan-j2-2.7.1-12_patch_08.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server xalan-j2-2.7.1-12_patch_08.ep5.el6
Fixes 1 record
Priority MEDIUM 48
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions an…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.14066 · Published 2014-04-15 · Partial fix · 2.7.2 CWE-264
