Red Hat Security Advisory

RHSA-2018:3817

Red Hat JBoss Fuse/A-MQ 6.3 R10 security and bug fix update

Released 2018-12-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss A-MQ 6.3
Red Hat JBoss Fuse 6.3

Fixes 3 records

TI-2018-15781 CVE-2018-1000129 · GHSA-hfpg-gqjw-779m

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that…

MEDIUM 48

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.24674 Published 2018-03-14 Partial fix · 1.5.0 CWE-79

TI-2018-05816 CVE-2018-8039 · GHSA-jc7r-v6fg-2gpf

Improper handling of exceptional conditions in Apache CXF

MEDIUM 46

It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.08507 Published 2018-07-02 Partial fix · 3.1.16, 3.2.5 CWE-755

TI-2017-05177 CVE-2017-7536 · GHSA-xxgp-pcfc-3vgc

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when…

LOW 31

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernat…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00482 Published 2018-01-10 Partial fix · 5.2.5.Final, 5.3.6.Final +1 CWE-592