RHSA-2010:0939High
Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP09 update
🔗 CVE IDs covered (3)
📋 Description
CVE-2010-3708 — JBoss drools deserialization remote code execution CVE-2010-3862 — JBoss Remoting Denial-Of-Service CVE-2010-3878 — JBoss EAP jmx console FileDeployment CSRF
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform 4.3
✅ Remediation
JBoss Enterprise Application Platform 4.3.0.CP09 is available from the Red Hat Customer Portal. To download and install the complete JBEAP 4.3.0.CP09 distribution: 1) Log into the Customer Portal: https://access.redhat.com/login 2) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 3) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.3.0.GA_CP09". 4) Select the desired installation method, for example the binary installer.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2010:0939
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://docs.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3/html-single/Release_Notes_CP09/index.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=604617
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=633859
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=641389
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0939.json