Read the docs
Red Hat Security Advisory

RHSA-2014:2020

Red Hat JBoss Enterprise Application Platform 6.3.2 security update

Released 2014-12-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2014-02901 CVE-2014-3577 · GHSA-cfh5-3ghh-wfjx

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before…

Priority LOW 38

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09189 Published 2014-08-21 Partial fix · 4.3.5 CWE-347
TI-2014-02944 CVE-2014-3623 · GHSA-99v3-9x35-c5vf

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before…

Priority LOW 35

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security seman…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09224 Published 2014-10-30 Partial fix · 1.6.17, 2.0.2 CWE-287
TI-2012-05114 CVE-2012-6153 · GHSA-2x83-r56g-cv47

http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not…

Priority LOW 29

http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05844 Published 2014-09-04 Partial fix · 4.2.3 CWE-20