RHSA-2013:0258High

Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 security update

Published
February 13, 2013
Last Modified
November 7, 2026

🔗 CVE IDs covered (2)

CVE-2012-3451 →CVE-2012-5633 →

📋 Description

CVE-2012-3451 — apache-cxf: SOAPAction spoofing on document literal web services CVE-2012-5633 — apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor

🎯 Affected products1

  • Red Hat JBoss Web Platform 5.2

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing JBoss Enterprise Web Platform installation (including all applications and configuration files). The JBoss server process must be restarted for this update to take effect.

🔗 References (7)