Red Hat Security Advisory

RHSA-2014:1369

Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 update

Released 2014-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fuse ESB Enterprise 7.1.0
Fuse MQ Enterprise 7.1.0
Fuse Management Console 7.1.0

Fixes 3 records

TI-2014-00102 CVE-2014-0107 · GHSA-rc2w-r4jq-7pfx

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict…

MEDIUM 48

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.14066 Published 2014-04-15 Partial fix · 2.7.2 CWE-264

TI-2014-00069 CVE-2014-0074 · GHSA-9486-j794-vqc4

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind…

MEDIUM 41

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05487 Published 2014-10-06 Partial fix CWE-287

TI-2013-01939 CVE-2013-2172 · GHSA-r237-w2w6-jq3p

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security…

LOW 29

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the Canon…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0593 Published 2013-08-20 Partial fix · 1.4.8, 1.5.5 CWE-310