RHSA-2011:1456Medium
Red Hat Security Advisory: JBoss Enterprise SOA Platform 5.2.0 update
🔗 CVE IDs covered (2)
📋 Description
CVE-2010-1330 — jruby: XSS in the regular expression engine when processing invalid UTF-8 byte sequences CVE-2011-4085 — Invoker servlets authentication bypass (HTTP verb tampering)
🎯 Affected products1
- Red Hat JBoss SOA Platform 5.1
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update).
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2011:1456
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://docs.redhat.com/docs/en-US/index.html
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=soaplatform&downloadType=distributions
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=750306
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=750422
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1456.json