RHSA-2012:1232High

Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 update

Published
September 5, 2012
Last Modified
November 7, 2026

🔗 CVE IDs covered (6)

CVE-2009-2625 →CVE-2011-2908 →CVE-2011-4605 →CVE-2012-0213 →CVE-2012-1167 →CVE-2012-2377 →

📋 Description

CVE-2009-2625 — JDK: XML parsing Denial-Of-Service (6845701) CVE-2011-2908 — CSRF on jmx-console allows invocation of operations on mbeans CVE-2011-4605 — JNDI: unauthenticated remote write access is permitted by default CVE-2012-0213 — jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files CVE-2012-1167 — JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm CVE-2012-2377 — JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started

🎯 Affected products1

  • Red Hat JBoss Portal 5.2

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up all applications deployed on JBoss Enterprise Portal Platform, along with all customized configuration files, and any databases and database settings.

🔗 References (11)