Red Hat Security Advisory

RHSA-2014:0898

Red Hat JBoss Enterprise Web Platform 5.2.0 security update

Released 2014-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Platform 5 for RHEL 5 Server picketlink-federation-2.1.5-3_patch_01.ep5.el5
Red Hat JBoss Web Platform 5 for RHEL 6 Server picketlink-federation-2.1.5-3_patch_01.el6_5

Fixes 1 record

TI-2014-02856 CVE-2014-3530 · GHSA-2c9q-qwrc-f486

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in…

LOW 39

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03857 Published 2014-07-22 Partial fix · 2.7.0.Final CWE-200