RHSA-2013:1209Medium

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.1.1 update

Published
September 4, 2013
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2012-3499 →CVE-2012-4558 →CVE-2013-1862 →CVE-2013-1896 →CVE-2013-1921 →CVE-2013-2172 →CVE-2013-4112 →CVE-2013-6495 →

📋 Description

CVE-2012-3499 — httpd: multiple XSS flaws due to unescaped hostnames CVE-2012-4558 — httpd: XSS flaw in mod_proxy_balancer manager interface CVE-2013-1862 — httpd: mod_rewrite allows terminal escape sequences to be written to the log file CVE-2013-1896 — httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav CVE-2013-1921 — PicketBox: Insecure storage of masked passwords CVE-2013-2172 — Java: XML signature spoofing CVE-2013-4112 — JGroups: Authentication via cached credentials CVE-2013-6495 — Bayeux: Reflected Cross-Site Scripting (XSS)

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 6.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.

🔗 References (12)