Red Hat Security Advisory: Red Hat JBoss Operations Network 3.1.2 update
🔗 CVE IDs covered (1)
📋 Description
CVE-2013-4452 — ON: World readable configuration files expose sensitive data
🎯 Affected products1
- Red Hat JBoss Operations Network 3.1
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Operations Network installation (including its databases, applications, configuration files, the JBoss Operations Network server's file system directory, and so on). To apply the fix for CVE-2013-4452 to an existing server or agent, for which you do not want to use the default patched files distributed by this update, using the chmod utility, remove the read file permission attribute from the following files (where it exists): <RHQ_SERVER_HOME>/bin/rhq-server.properties <RHQ_AGENT_HOME>/conf/agent-configuration.xml ~/.java/.userPrefs/rhq-agent/default/prefs.xml Note: This update provides fixes for the server and agent components of Red Hat JBoss Operations Network. It is recommended to apply all the patches provided by this update. Refer to the JBoss Operations Network 3.1.2 Release Notes for installation information.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2013:1762
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em&downloadType=securityPatches&version=3.1.2
- externalhttps://access.redhat.com/site/documentation/Red_Hat_JBoss_Operations_Network/
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1021756
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1762.json