Red Hat Security Advisory

RHSA-2015:0236

Red Hat JBoss Fuse/A-MQ 6.1.0 security and bug fix update

Released 2015-02-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss A-MQ 6.1
Red Hat JBoss Fuse 6.1

Fixes 2 records

TI-2014-02946 CVE-2014-3625 · GHSA-hhm4-hwq6-3c6w

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before…

LOW 35

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09928 Published 2014-11-20 Partial fix · 3.2.12, 4.0.8 +1 CWE-22

TI-2014-02944 CVE-2014-3623 · GHSA-99v3-9x35-c5vf

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before…

LOW 35

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security seman…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09224 Published 2014-10-30 Partial fix · 1.6.17, 2.0.2 CWE-287