Red Hat Security Advisory

RHSA-2015:0091

Red Hat JBoss Data Grid 6.4.0 update

Released 2015-01-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Data Grid 6.4

Fixes 2 records

TI-2014-00220 CVE-2014-0227 · GHSA-42j3-498q-m6vp

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before…

MEDIUM 54

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occu…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.21045 Published 2015-02-16 Partial fix · 6.0.42, 7.0.55 +1 CWE-19

TI-2014-02856 CVE-2014-3530 · GHSA-2c9q-qwrc-f486

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in…

LOW 39

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03857 Published 2014-07-22 Partial fix · 2.7.0.Final CWE-200