Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2013:0270
HistoryFeb 20, 2013 - 2:59 a.m.

jakarta security update

2013-02-2002:59:36
CentOS Project
lists.centos.org
51

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

61.5%

JSON

CentOS Errata and Security Advisory CESA-2013:0270

The Jakarta Commons HttpClient component can be used to build HTTP-aware
client applications (such as web browsers and web service clients).

The Jakarta Commons HttpClient component did not verify that the server
hostname matched the domain name in the subject’s Common Name (CN) or
subjectAltName field in X.509 certificates. This could allow a
man-in-the-middle attacker to spoof an SSL server if they had a certificate
that was valid for any domain name. (CVE-2012-5783)

All users of jakarta-commons-httpclient are advised to upgrade to these
updated packages, which correct this issue. Applications using the Jakarta
Commons HttpClient component must be restarted for this update to take
effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-February/081403.html

Affected packages:
jakarta-commons-httpclient
jakarta-commons-httpclient-demo
jakarta-commons-httpclient-javadoc
jakarta-commons-httpclient-manual

Upstream details at:
https://access.redhat.com/errata/RHSA-2013:0270

OSVersionArchitecturePackageVersionFilename
CentOS5i386jakarta-commons-httpclient< 3.0-7jpp.2jakarta-commons-httpclient-3.0-7jpp.2.i386.rpm
CentOS5i386jakarta-commons-httpclient-demo< 3.0-7jpp.2jakarta-commons-httpclient-demo-3.0-7jpp.2.i386.rpm
CentOS5i386jakarta-commons-httpclient-javadoc< 3.0-7jpp.2jakarta-commons-httpclient-javadoc-3.0-7jpp.2.i386.rpm
CentOS5i386jakarta-commons-httpclient-manual< 3.0-7jpp.2jakarta-commons-httpclient-manual-3.0-7jpp.2.i386.rpm
CentOS5x86_64jakarta-commons-httpclient< 3.0-7jpp.2jakarta-commons-httpclient-3.0-7jpp.2.x86_64.rpm
CentOS5x86_64jakarta-commons-httpclient-demo< 3.0-7jpp.2jakarta-commons-httpclient-demo-3.0-7jpp.2.x86_64.rpm
CentOS5x86_64jakarta-commons-httpclient-javadoc< 3.0-7jpp.2jakarta-commons-httpclient-javadoc-3.0-7jpp.2.x86_64.rpm
CentOS5x86_64jakarta-commons-httpclient-manual< 3.0-7jpp.2jakarta-commons-httpclient-manual-3.0-7jpp.2.x86_64.rpm

Related

fedora 5
nessus 29
redhat 20
ibm 58
prion 2
cgr 1
openvas 19
oraclelinux 1
github 2
mageia 1
wolfi 1
cve 2
amazon 2
debiancve 2
aix 1
osv 3
veracode 2
f5 4
atlassian 2
ubuntucve 2
debian 1
photon 2
ubuntu 1
securityvulns 1
fedora
fedora
[SECURITY] Fedora 18 Update: jakarta-commons-httpclient-3.1-12.fc18
2013-02-01 16:27:25
[SECURITY] Fedora 16 Update: jakarta-commons-httpclient-3.1-12.fc16
2013-02-01 16:49:49
[SECURITY] Fedora 17 Update: jakarta-commons-httpclient-3.1-12.fc17
2013-02-01 16:45:35
nessus
nessus
openSUSE Security Update : jakarta-commons-httpclient3 (openSUSE-SU-2013:0354-1)
2014-06-13 00:00:00
Fedora 18 : jakarta-commons-httpclient-3.1-12.fc18 (2013-1203)
2013-02-04 00:00:00
Oracle Linux 5 / 6 : jakarta-commons-httpclient (ELSA-2013-0270)
2013-07-12 00:00:00
redhat
redhat
(RHSA-2013:0680) Moderate: jakarta-commons-httpclient security update
2013-03-25 00:00:00
(RHSA-2013:0682) Moderate: jakarta-commons-httpclient security update
2013-03-25 00:00:00
(RHSA-2014:0224) Moderate: redhat-support-plugin-rhev security update
2014-02-27 00:00:00
ibm
ibm
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2012-5783)
2018-12-06 06:05:02
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2012-5783)
2018-07-18 16:25:03
Security Bulletin: FileNet Content Manager is affected by a HTTP Client vulnerability
2021-10-26 21:21:16
prion
prion
Code injection
2012-11-04 22:55:00
Design/Logic Flaw
2014-09-04 17:55:00
cgr
cgr
CVE-2012-5783 vulnerabilities
2024-04-26 03:19:48
openvas
openvas
Oracle: Security Advisory (ELSA-2013-0270)
2015-10-06 00:00:00
Fedora Update for jakarta-commons-httpclient FEDORA-2013-1189
2013-02-04 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-169)
2015-09-08 00:00:00
oraclelinux
oraclelinux
jakarta-commons-httpclient security update
2013-02-19 00:00:00
github
github
Improper Certificate Validation in apache HttpClient
2022-05-13 01:10:34
Improper certificate validation in org.apache.httpcomponents:httpclient
2018-10-17 00:05:15
mageia
mageia
Updated jakarta-commons-httpclient package fixes security vulnerability
2013-07-06 18:11:31
wolfi
wolfi
CVE-2012-5783 vulnerabilities
2024-04-26 09:06:29
cve
cve
CVE-2012-5783
2012-11-04 22:55:00
CVE-2012-6153
2014-09-04 17:55:00
amazon
amazon
Medium: jakarta-commons-httpclient
2013-03-14 22:04:00
Important: jakarta-commons-httpclient
2014-09-17 21:47:00
debiancve
debiancve
CVE-2012-5783
2012-11-04 22:55:00
CVE-2012-6153
2014-09-04 17:55:00
aix
aix
AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient
2023-04-13 13:44:57
osv
osv
Improper Certificate Validation in apache HttpClient
2022-05-13 01:10:34
Improper certificate validation in org.apache.httpcomponents:httpclient
2018-10-17 00:05:15
commons-httpclient - security update
2015-05-19 00:00:00
veracode
veracode
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 08:56:38
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 08:59:46
f5
f5
K15741 : Apache Commons HttpClient vulnerability CVE-2012-6153
2014-10-27 00:00:00
K15364328 : Apache vulnerabilities CVE-2012-5783 and CVE-2012-6153
2016-02-02 00:00:00
SOL15741 - Apache Commons HttpClient vulnerability CVE-2012-6153
2014-10-27 00:00:00
atlassian
atlassian
Update the version of commons-httpclient to address CVE-2012-5783 & CVE-2014-3577 and gain SNI support
2015-05-12 07:34:43
Update the version of commons-httpclient to address CVE-2012-5783 & CVE-2014-3577 and gain SNI support
2015-05-12 07:34:43
ubuntucve
ubuntucve
CVE-2012-6153
2014-09-04 00:00:00
CVE-2012-5783
2012-11-04 00:00:00
debian
debian
[SECURITY] [DLA 222-1] commons-httpclient security update
2015-05-19 15:18:39
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0141
2020-09-17 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0141
2020-09-17 00:00:00
ubuntu
ubuntu
Apache Commons HttpClient vulnerabilities
2015-10-14 00:00:00
securityvulns
securityvulns
[USN-2769-1] Apache Commons HttpClient
2015-10-25 00:00:00

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

61.5%

JSON
Related for CESA-2013:0270
fedora5nessus29redhat20ibm58prion2cgr1openvas19oraclelinux1github2mageia1wolfi1cve2amazon2debiancve2aix1osv3veracode2f54atlassian2ubuntucve2debian1photon2ubuntu1securityvulns1