Lucene search

K
redhatRedHatRHSA-2014:0564
HistoryMay 27, 2014 - 12:00 a.m.

(RHSA-2014:0564) Low: Red Hat JBoss Enterprise Application Platform 6.2.3 update

2014-05-2700:00:00
access.redhat.com
8

0.0004 Low

EPSS

Percentile

5.1%

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.

It was found that the security auditing functionality provided by PicketBox
and JBossSX, both security frameworks for Java applications, used a
world-readable audit.log file to record sensitive information. A local user
could possibly use this flaw to gain access to the sensitive information in
the audit.log file. (CVE-2014-0059)

This release serves as a replacement for Red Hat JBoss Enterprise
Application Platform 6.2.2, and includes bug fixes and enhancements.
Documentation for these changes will be available shortly from the Red Hat
JBoss Enterprise Application Platform 6.2.3 Release Notes, linked to in
the References.

All users of Red Hat JBoss Enterprise Application Platform 6.2 on Red Hat
Enterprise Linux 5 are advised to upgrade to these updated packages.
The JBoss server process must be restarted for the update to take effect.

0.0004 Low

EPSS

Percentile

5.1%