DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Fuse: Mehrere Schwachstellen
view advisory published 2016-10-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Fuse und Red Hat JBoss A-MQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Code mit den Privilegien des angegriffenen Dienstes zur Ausführung bringen, vertrauliche Daten einzusehen, Informationen zu manipulieren oder Sicherheitsmechanismen zu umgehen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-3192US | medium5.5 | — | ||
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to caus… | ||||
| CVE-2016-2141US | critical9.8 | — | ||
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security re… | ||||
| CVE-2016-4437US | critical9.8OT critical | KEV | ||
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access rest… | ||||
| CVE-2015-5348US | high8.1 | — | ||
Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attac… | ||||
| CVE-2016-2510US | high8.1 | — | ||
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafte… | ||||
| CVE-2015-5344US | critical9.8 | — | ||
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an H… | ||||
| CVE-2015-7940US | medium5.0 | — | ||
The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series o… | ||||
02
references
External citations — patches, advisories, analysis.
- Juniper Security Advisory JSA11023 vom 2020-07-08external
- Red Hat Security Advisory RHSA-2016:2035-1 vom 2016-10-06external
- Red Hat Security Advisory RHSA-2016:2036-1 vom 2016-10-06external
- Ubuntu Security Notice USN-7139-1 vom 2024-12-05external
- WID-SEC-W-2024-3616 - CSAF Versionself
- WID-SEC-2024-3616 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan