RHSA-2012:0091High

Red Hat Security Advisory: JBoss Enterprise Portal Platform 4.3 CP07 update

Published
February 2, 2012
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2011-1184 →CVE-2011-1484 →CVE-2011-2526 →CVE-2011-4085 →CVE-2011-4858 →CVE-2011-5062 →CVE-2011-5063 →CVE-2011-5064 →

📋 Description

CVE-2011-1184 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-1484 — JBoss Seam privilege escalation caused by EL interpolation in FacesMessages CVE-2011-2526 — tomcat: security manager restrictions bypass CVE-2011-4085 — Invoker servlets authentication bypass (HTTP verb tampering) CVE-2011-4858 — tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) CVE-2011-5062 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-5063 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-5064 — tomcat: Multiple weaknesses in HTTP DIGEST authentication

🎯 Affected products1

  • Red Hat JBoss Portal 4.3

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). The JBoss server process must be restarted for this update to take effect. Note that if you have created custom applications that are packaged with a copy of the JBoss Seam 2 library, those applications must be rebuilt with the updated jboss-seam.jar file provided by this update.

🔗 References (10)