RHSA-2014:0029High

Red Hat Security Advisory: Red Hat JBoss Data Grid 6.2.0 update

Published
January 15, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2012-6612 →CVE-2013-1921 →CVE-2013-2035 →CVE-2013-3827 →CVE-2013-4112 →CVE-2013-6397 →CVE-2013-6407 →CVE-2013-6408 →

📋 Description

CVE-2012-6612 — Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler CVE-2013-1921 — PicketBox: Insecure storage of masked passwords CVE-2013-2035 — HawtJNI: predictable temporary file name leading to local arbitrary code execution CVE-2013-3827 — JSF2: Multiple Information Disclosure flaws due to unsafe path traversal CVE-2013-4112 — JGroups: Authentication via cached credentials CVE-2013-6397 — Solr: directory traversal when loading XSL stylesheets and Velocity templates CVE-2013-6407 — Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler CVE-2013-6408 — Solr: XML eXternal Entity (XXE) flaw in DocumentAnalysisRequestHandler

🎯 Affected products1

  • Red Hat JBoss Data Grid 6.2

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Data Grid installation.

🔗 References (12)