RHSA-2012:0089High
Red Hat Security Advisory: JBoss Operations Network 2.4.2 update
🔗 CVE IDs covered (5)
📋 Description
CVE-2011-3206 — JON: Multiple XSS flaws CVE-2011-4573 — JON: Incorrect delete permissions check CVE-2011-4858 — tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) CVE-2012-0052 — JON: Unapproved agents can connect using the name of an existing approved agent CVE-2012-0062 — JON: Unapproved agents can hijack an approved agent's endpoint by using a null security token
🎯 Affected products1
- Red Hat JBoss Operations Network 2.4
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update).
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2012:0089
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://docs.redhat.com/docs/en-US/index.html
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=em&version=2.4.2
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=734662
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=750521
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=760024
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=781964
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=783008
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0089.json