Red Hat Security AdvisoryRHSA-2017:3115
Red Hat JBoss Fuse/A-MQ 6.3 R5 security and bug fix update
Released 2017-11-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss A-MQ 6.3
- Red Hat JBoss Fuse 6.3
Fixes 3 records
Priority MEDIUM 47
Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a r…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.24143 · Published 2017-01-19 · Partial fix · 0.1.54 CWE-22
Priority MEDIUM 41
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04907 · Published 2016-12-29 · Partial fix · 3.2.18, 4.2.9 +1 CWE-22
Priority LOW 37
The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05335 · Published 2017-06-16 · Partial fix CWE-20
