RHSA-2012:1072Low
Red Hat Security Advisory: jbosscache security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2012-0034 — Cache: NonManagedConnectionFactory will log password in clear text when an exception occurs
🎯 Affected products1
- Red Hat JBoss Web Platform 5.1
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). To apply this update: 1) Before applying this update, back up your existing JBoss Enterprise Web Platform's "jboss-as-web/server/production/lib/jbosscache-core.jar" file. 2) Download the update. 3) Rename the jbosscache-core-JBPAPP-7852-signed.jar file provided by the ZIP file to jbosscache-core.jar, and then copy it to the "jboss-as-web/server/production/lib/" directory, overwriting the old jbosscache-core.jar. 4) Restart the JBoss server process.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2012:1072
- externalhttps://access.redhat.com/security/updates/classification/#low
- externalhttps://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=11063&product=enterpriseweb.platform&version=5.1.2&downloadType=securityPatches
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=772835
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1072.json