Red Hat Security AdvisoryRHSA-2014:1834
Red Hat JBoss Enterprise Application Platform 5.2.0 security update
Released 2014-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS apache-cxf-2.2.12-14.patch_09.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES apache-cxf-2.2.12-14.patch_09.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server apache-cxf-2.2.12-14.patch_09.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server apache-cxf-2.2.12-14.patch_09.el6
Fixes 2 records
Priority LOW 38
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09189 · Published 2014-08-21 · Partial fix · 4.3.5 CWE-347
Priority LOW 29
http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05844 · Published 2014-09-04 · Partial fix · 4.2.3 CWE-20
