RHSA-2013:1029High
Red Hat Security Advisory: Fuse MQ Enterprise 7.1.0 update
🔗 CVE IDs covered (6)
📋 Description
CVE-2012-6092 — activemq: Multiple XSS flaws in web demos CVE-2012-6551 — activemq: DoS by resource consumption via HTTP requests to sample webapp CVE-2013-1879 — ActiveMQ: XSS vulnerability in scheduled.jsp CVE-2013-1880 — ActiveMQ: XSS vulnerability in portfolioPublish demo application CVE-2013-2035 — HawtJNI: predictable temporary file name leading to local arbitrary code execution CVE-2013-3060 — activemq: Unauthenticated access to web console
🎯 Affected products1
- Fuse MQ Enterprise 7.1.0
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update).
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2013:1029
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=fuse.mq.enterprise&downloadType=securityPatches&version=7.1.0
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=924446
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=924447
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=955906
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=955907
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=955908
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=958618
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1029.json