RHSA-2012:0108Low
Red Hat Security Advisory: jbosscache security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2012-0034 — Cache: NonManagedConnectionFactory will log password in clear text when an exception occurs
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform 5.1
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). To apply this update: 1) Before applying this update, back up your existing JBoss Enterprise Application Platform's "jboss-as/server/[PROFILE]/lib/jbosscache-core.jar" file. 2) Download the update. 3) Rename the jbosscache-core-JBPAPP-7852-signed.jar file provided by the ZIP file to jbosscache-core.jar, and then copy it to the "jboss-as/server/[PROFILE]/lib/" directory, overwriting the old jbosscache-core.jar. 4) Restart the JBoss server process.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2012:0108
- externalhttps://access.redhat.com/security/updates/classification/#low
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=5.1.2
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=772835
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0108.json