RHSA-2013:0665High
Red Hat Security Advisory: JBoss Data Grid 6.1.0 update
🔗 CVE IDs covered (5)
📋 Description
CVE-2012-4431 — Tomcat/JBoss Web - Bypass of CSRF prevention filter CVE-2012-5629 — JBoss: allows empty password to authenticate against LDAP CVE-2012-5885 — tomcat: three DIGEST authentication implementation issues CVE-2012-5886 — tomcat: three DIGEST authentication implementation issues CVE-2012-5887 — tomcat: three DIGEST authentication implementation issues
🎯 Affected products1
- JBoss Data Grid 6.1
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Data Grid installation.
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2013:0665
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://tools.ietf.org/html/rfc4513
- externalhttp://tomcat.apache.org/security-6.html
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.grid&downloadType=distributions
- externalhttps://access.redhat.com/knowledge/docs/
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=873664
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=883636
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=885569
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0665.json