Red Hat Security AdvisoryRHSA-2014:0885
Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Released 2014-07-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS picketlink-federation-2.1.5-3_patch_01.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES picketlink-federation-2.1.5-3_patch_01.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server picketlink-federation-2.1.5-3_patch_01.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server picketlink-federation-2.1.5-3_patch_01.el6_5
Fixes 1 record
Priority LOW 39
The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03857 · Published 2014-07-22 · Partial fix · 2.7.0.Final CWE-200
