RHSA-2013:0586High
Red Hat Security Advisory: jbosssx security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2012-5629 — JBoss: allows empty password to authenticate against LDAP
🎯 Affected products6
- JBoss Enterprise BRMS Platform 5.3
- Red Hat JBoss Portal 4.3
- Red Hat JBoss Portal 5.2
- Red Hat JBoss SOA Platform 4.2
- Red Hat JBoss SOA Platform 4.3
- Red Hat JBoss SOA Platform 5.3
✅ Remediation
The References section of this erratum contains download links (you must log in to download the update). Before applying this update, back up your JBoss installation, including any databases, database settings, applications, configuration files, and so on. For JBoss Enterprise BRMS Platform, JBoss Enterprise Portal Platform, and JBoss Enterprise SOA Platform, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process.
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2013:0586
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://tools.ietf.org/html/rfc4513
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms&downloadType=securityPatches&version=5.3.1
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=4.3+CP07
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=5.2.2
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=soaplatform&downloadType=securityPatches&version=4.2.0.GA_CP05
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=soaplatform&version=4.3.0.GA_CP05
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=885569
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0586.json