Red Hat Security AdvisoryRHSA-2014:0883
Red Hat JBoss Enterprise Application Platform 6.2.4 security update
Released 2014-07-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5 Server picketlink-federation-2.1.9-5.SP3_redhat_2.1.ep6.el5
- Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6 Server picketlink-federation-2.1.9-5.SP3_redhat_2.1.ep6.el6
Fixes 1 record
Priority LOW 39
The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03857 · Published 2014-07-22 · Partial fix · 2.7.0.Final CWE-200
