RHSA-2012:0406High

Red Hat Security Advisory: JBoss Operations Network 3.0.1 update

Published
March 20, 2012
Last Modified
August 4, 2026

🔗 CVE IDs covered (5)

CVE-2011-4858 →CVE-2012-0032 →CVE-2012-0052 →CVE-2012-0062 →CVE-2012-1100 →

📋 Description

CVE-2011-4858 — tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) CVE-2012-0032 — CLI: world-writable root directory CVE-2012-0052 — JON: Unapproved agents can connect using the name of an existing approved agent CVE-2012-0062 — JON: Unapproved agents can hijack an approved agent's endpoint by using a null security token CVE-2012-1100 — JON: LDAP authentication allows any user access if bind credentials are bad

🎯 Affected products1

  • Red Hat JBoss Operations Network 3.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss ON installation (including its databases, applications, configuration files, the JBoss ON server's file system directory, and so on). Refer to the JBoss Operations Network 3.0.1 Release Notes for installation information.

🔗 References (10)