Red Hat Security Advisory

RHSA-2015:1672

Red Hat JBoss Enterprise Application Platform security update

Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4

Fixes 1 record

TI-2015-02790 CVE-2015-3158 · GHSA-9qhq-j4xm-cw48

The invokeNextValve function in…

LOW 23

The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01913 Published 2015-08-26 Partial fix · 2.7.1.Final CWE-264