Red Hat Security AdvisoryRHSA-2020:3587
Red Hat JBoss Fuse/A-MQ 6.3 R17 security and bug fix update
Released 2020-09-01 · Red Hat rating Important · View on Red Hat →
Fixes 3 records
Priority MEDIUM 64
Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/ substring of a URI.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.26803 · Published 2019-07-03 · Partial fix · 2.5.0 CWE-918
Priority MEDIUM 61
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.29082 · Published 2019-08-20 · Partial fix · 1.9.4 CWE-502
Priority MEDIUM 40
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04491 · Published 2020-07-08 · Partial fix · 3.4.0 CWE-74
