RHSA-2013:0648Medium
Red Hat Security Advisory: jbossweb security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2012-4431 — Tomcat/JBoss Web - Bypass of CSRF prevention filter CVE-2012-5885 — tomcat: three DIGEST authentication implementation issues CVE-2012-5886 — tomcat: three DIGEST authentication implementation issues CVE-2012-5887 — tomcat: three DIGEST authentication implementation issues
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform 6.0
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Enterprise Application Platform installation and deployed applications. The JBoss server process must be restarted for this update to take effect.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2013:0648
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.0.1
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=873664
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=883636
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0648.json