Red Hat Security AdvisoryRHSA-2015:1670
Red Hat JBoss Enterprise Application Platform security update
Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server glassfish-jsf-eap6-2.1.28-9.redhat_10.1.ep6.el6, hibernate4-core-eap6-4.2.20-1.Final_redhat_1.1.ep6.el6, hibernate4-eap6-4.2.20-1.Final_redhat_1.1.ep6.el6 +47
Fixes 1 record
Priority LOW 23
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01913 · Published 2015-08-26 · Partial fix · 2.7.1.Final CWE-264
