Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP09 update
JBoss Enterprise Application Platform (JBEAP) 4.3.0.CP09, which fixes three security issues and multiple bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-3878US | medium4.3 | — | ||
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote att… | ||||
| CVE-2010-3862US | low2.6 | — | ||
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Ha… | ||||
| CVE-2010-3708US | high7.5 | — | ||
The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4… | ||||
references
External citations — patches, advisories, analysis.
- http://docs.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3/html-single/Release_Notes_CP09/index.htmlexternal
- https://access.redhat.com/errata/RHSA-2010:0939self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 604617external
- 633859external
- 641389external
- Canonical URLself
remediations (3)
- FixedRed Hat JBoss Enterprise Application Platform 4.3
JBoss Enterprise Application Platform 4.3.0.CP09 is available from the Red Hat Customer Portal. To download and install the complete JBEAP 4.3.0.CP09 distribution: 1) Log into the Customer Portal: https://access.redhat.com/login 2) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 3) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.3.0.GA_CP09". 4) Select the desired installation method, for example the binary installer.
https://access.redhat.com/errata/RHSA-2010:0939 - FixedRed Hat JBoss Enterprise Application Platform 4.3
JBoss Enterprise Application Platform 4.3.0.CP09 is available from the Red Hat Customer Portal. To download and install the complete JBEAP 4.3.0.CP09 distribution: 1) Log into the Customer Portal: https://access.redhat.com/login 2) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 3) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.3.0.GA_CP09". 4) Select the desired installation method, for example the binary installer.
https://access.redhat.com/errata/RHSA-2010:0939 - FixedRed Hat JBoss Enterprise Application Platform 4.3
JBoss Enterprise Application Platform 4.3.0.CP09 is available from the Red Hat Customer Portal. To download and install the complete JBEAP 4.3.0.CP09 distribution: 1) Log into the Customer Portal: https://access.redhat.com/login 2) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 3) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.3.0.GA_CP09". 4) Select the desired installation method, for example the binary installer.
https://access.redhat.com/errata/RHSA-2010:0939
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan