Red Hat Security AdvisoryRHSA-2015:1669
Red Hat JBoss Enterprise Application Platform security update
Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server glassfish-jsf-eap6-2.1.28-9.redhat_10.1.ep6.el5, hibernate4-core-eap6-4.2.20-1.Final_redhat_1.1.ep6.el5, hibernate4-eap6-4.2.20-1.Final_redhat_1.1.ep6.el5 +47
Fixes 1 record
Priority LOW 23
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01913 · Published 2015-08-26 · Partial fix · 2.7.1.Final CWE-264
