Red Hat Security Advisory

RHSA-2014:1171

Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 update

Released 2014-09-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Fuse ESB Enterprise 7.1.0
Fuse MQ Enterprise 7.1.0
Fuse Management Console 7.1.0

Fixes 1 record

TI-2014-02491 CVE-2014-3120 · GHSA-mrfm-jxgf-2h6v

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which…

CRITICAL 92KEV

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.88559 Published 2014-07-28 Fixed in 1.4.0.Beta1 CWE-284