Red Hat Security Advisory: JBoss Operations Network 2.4.2 security update
An update for JBoss Operations Network 2.4.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-1100US | medium5.8 | — | ||
Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote… | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- FixedRed Hat JBoss Operations Network 2.4
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss ON installation (including its databases, applications, configuration files, the JBoss ON server's file system directory, and so on). Stop the JBoss ON server (rhq-server.sh stop) before applying the update. After applying the update, start the JBoss ON server (rhq-server.sh start).
https://access.redhat.com/errata/RHSA-2012:0396
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan