What is RHSA-2013:0645?

RHSA-2013:0645 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: apache-cxf security update

Which CVE IDs does RHSA-2013:0645 cover?

RHSA-2013:0645 covers the following CVE IDs: CVE-2012-5633, CVE-2013-0239. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2013:0645?

RHSA-2013:0645 affects 1 product, including: Red Hat JBoss Enterprise Application Platform 6.0.

RHSA-2013:0645High

Red Hat Security Advisory: apache-cxf security update

Vendor

Red Hat Product Security

Published

March 13, 2013

Last Modified

November 7, 2026

🔗 CVE IDs covered (2)

CVE-2012-5633 →CVE-2013-0239 →

📋 Description

CVE-2012-5633 — apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor CVE-2013-0239 — apache-cxf: UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate

🎯 Affected products1

Red Hat JBoss Enterprise Application Platform 6.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Enterprise Application Platform installation and deployed applications. The JBoss server process must be restarted for this update to take effect.

🔗 References (7)

selfhttps://access.redhat.com/errata/RHSA-2013:0645
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.0.1
externalhttp://cxf.apache.org/security-advisories.html
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=889008
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=905722
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0645.json