Moderate: Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.5.0 update

Red Hat JBoss Web Framework Kit 2.5.0, which fixes one security issue, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS ba...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.0.0 security update

Red Hat JBoss Fuse and A-MQ 6.0.0 R1 P3 Patch 3 on Rollup Patch 1, which addresses three security issues and contains several bug fixes, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. Common...

Important: Red Hat Security Advisory: XStream security update

An update for the XStream component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss Data Virtualization 6.0.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

RHEL 5 / 6 : Red Hat JBoss Enterprise Application Platform 6.2.1 (RHSA-2014:0253)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0253 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. A denial of service flaw...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 security update

An update for Red Hat JBoss Enterprise Application Platform 6.2.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 security update

Updated Red Hat JBoss Enterprise Application Platform 6.2.1 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...

JBoss Enterprise Application Platform明文密码本地信息泄漏漏洞

Bugtraq ID:65762 CVE ID:CVE-2014-0058 JBOSS是一个基于J2EE的开放源代码的应用服务器。 JBoss Enterprise Application Platform的安全审核功能会以明文方式记录请求参数，当使用BASIC或者基于FORM的验证时会记录敏感信息，可访问日志文件的攻击者可获取敏感信息。 0 JBoss Enterprise Application Platform 6.2.1 厂商补丁： JBOSS ----- 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

Important: Red Hat Security Advisory: XStream security update

An update for the XStream component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss Fuse Service Works 6.0.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS ba...

CVE-2011-2941

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter...

CVE-2011-4580

Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0058

The security audit functionality in Red Hat JBoss Enterprise Application Platform EAP 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files...

Open redirect

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter...

CVE-2011-2941

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Input validation

The security audit functionality in Red Hat JBoss Enterprise Application Platform EAP 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files...

CVE-2011-2941

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter...

CVE-2014-0058

The security audit functionality in Red Hat JBoss Enterprise Application Platform EAP 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files...

CVE-2011-4580

CVE-2011-4580 affects Red Hat JBoss Enterprise Portal Platform prior to 5.2.0. The issue is multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially leading to script execution in the victim’s portal session. The provided...

CVE-2014-0058

CVE-2014-0058 affects Red Hat JBoss EAP 6.x prior to 6.2.1. The security audit feature logs request parameters in plaintext, which could let a local attacker with access to audit logs obtain passwords or credentials. Public references in connected documents confirm Red Hat addressed this via a se...

CVE-2011-4580

Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...