What is RHSA-2013:1220?

RHSA-2013:1220 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: xml-security security update

Which CVE IDs does RHSA-2013:1220 cover?

RHSA-2013:1220 covers the following CVE IDs: CVE-2013-2172. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2013:1220?

RHSA-2013:1220 affects 1 product, including: Red Hat JBoss Web Platform 5.2.

RHSA-2013:1220Medium

Red Hat Security Advisory: xml-security security update

Vendor

Red Hat Product Security

Published

September 9, 2013

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2013-2172 →

📋 Description

CVE-2013-2172 — Java: XML signature spoofing

🎯 Affected products1

Red Hat JBoss Web Platform 5.2

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Platform installation (including all applications and configuration files). The JBoss server process must be restarted for this update to take effect.

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2013:1220
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=enterpriseweb.platform&downloadType=securityPatches&version=5.2.0
externalhttp://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=999263
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1220.json