Moderate: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.4 security update

An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2016-7034

CVE-2016-7034 concerns the dashbuilder component of Red Hat JBoss BPM Suite 6.x, where CSRF tokens generated during an active session are included in query strings. The underlying issue allows bypassing CSRF protections or performing CSRF attacks using old tokens. Red Hat advisories RHSA-2017:055...