RHSA-2013:0235High
Red Hat Security Advisory: jbossweb security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2012-3546 — Web: Bypass of security constraints
🎯 Affected products2
- Red Hat JBoss Portal 5.2
- Red Hat JBoss SOA Platform 5.3
✅ Remediation
The References section of this erratum contains download links (you must log in to download the update). Before applying this update, back up your JBoss installation, including any databases, database settings, applications, configuration files, and so on. For both JBoss Enterprise Portal Platform and JBoss Enterprise SOA Platform, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2013:0235
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=jbportal&version=5.2.2
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=soaplatform&version=5.3.0+GA
- externalhttp://tomcat.apache.org/security-6.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=883634
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0235.json