Red Hat Security Advisory

RHSA-2014:0884

Red Hat JBoss Enterprise Application Platform 6.2.4 security update

Released 2014-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.2

Fixes 1 record

TI-2014-02856 CVE-2014-3530 · GHSA-2c9q-qwrc-f486

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in…

LOW 39

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03857 Published 2014-07-22 Partial fix · 2.7.0.Final CWE-200