Red Hat Security AdvisoryRHSA-2015:1673
jboss-ec2-eap bug fix security update
Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server jboss-ec2-eap-7.5.3-1.Final_redhat_2.ep6.el6, jboss-ec2-eap-samples-7.5.3-1.Final_redhat_2.ep6.el6
Fixes 1 record
Priority LOW 23
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01913 · Published 2015-08-26 · Partial fix · 2.7.1.Final CWE-264
