RHSA-2011:0462High
Red Hat Security Advisory: jboss-seam security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2011-1484 — JBoss Seam privilege escalation caused by EL interpolation in FacesMessages
🎯 Affected products2
- Red Hat JBoss Enterprise Application Platform 4.3
- Red Hat JBoss Enterprise Application Platform 5.1
✅ Remediation
The References section of this erratum contains download links (you must log in to download the updated file). Before applying the update, backup your existing JBoss Enterprise Application Platform installation (including all applications and configuration files). Important: JBoss Enterprise Application Platform 4.3.0.CP09 ships with both the JBoss Seam and JBoss Seam 2 frameworks. Ensure you only replace version 2 with the updated jboss-seam.jar file. The JBoss server process must be restarted for the update to take effect.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2011:0462
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=5.1.0
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=4.3.0.GA_CP09
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=692421
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0462.json