RHSA-2012:0396High
Red Hat Security Advisory: JBoss Operations Network 2.4.2 security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2012-1100 — JON: LDAP authentication allows any user access if bind credentials are bad
🎯 Affected products1
- Red Hat JBoss Operations Network 2.4
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss ON installation (including its databases, applications, configuration files, the JBoss ON server's file system directory, and so on). Stop the JBoss ON server (rhq-server.sh stop) before applying the update. After applying the update, start the JBoss ON server (rhq-server.sh start).
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2012:0396
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em&downloadType=securityPatches&version=2.4.2
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=799789
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0396.json