Red Hat Security AdvisoryRHSA-2017:3141
rhvm-appliance security, bug fix, and enhancement update
Released 2017-11-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Virtualization 4 Hypervisor for RHEL 7 rhvm-appliance-1:4.1.20171102.0-1.el7
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts rhvm-appliance-1:4.1.20171102.0-1.el7
Fixes 3 records
Priority HIGH 75
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to t…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.37721 · Published 2018-02-06 · Partial fix · 2.6.7.1, 2.7.9.1 +1 CWE-184
Priority LOW 37
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02366 · Published 2017-05-21 · Partial fix · 1.9.2 CWE-200
Priority LOW 31
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernat…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00482 · Published 2018-01-10 · Partial fix · 5.2.5.Final, 5.3.6.Final +1 CWE-592
