Red Hat Security Advisory: Fuse MQ Enterprise 7.1.0 update
Fuse MQ Enterprise 7.1.0, which fixes one security issue, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-4461US | medium5.3 | — | ||
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2012:1605self
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=fuse.mq.enterprise&downloadType=distributionsexternal
- https://access.redhat.com/knowledge/docs/external
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 781677external
- Canonical URLself
remediations (1)
- FixedFuse MQ Enterprise 7.1.0
The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2012:1605
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan