Red Hat Security Advisory

RHSA-2014:1170

Red Hat JBoss Fuse/A-MQ 6.1.0 security update

Released 2014-09-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss A-MQ 6.1
Red Hat JBoss Fuse 6.1

Fixes 1 record

TI-2014-02491 CVE-2014-3120 · GHSA-mrfm-jxgf-2h6v

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which…

CRITICAL 92KEV

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.88559 Published 2014-07-28 Fixed in 1.4.0.Beta1 CWE-284