Red Hat Security Advisory: Red Hat Fuse 7.4.1 security update
A micro version update (from 7.4 to 7.4.1) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-14860US | medium6.5 | — | ||
It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attac… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en-us/red_hat_fuse/7.4/external
- https://access.redhat.com/errata/RHSA-2019:3244self
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.fuse&version=7.4.1external
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1761912external
- Canonical URLself
remediations (1)
- FixedRed Hat Fuse 7.4.1
Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. Installation instructions are available from the Fuse 7.4.0 product documentation page: https://access.redhat.com/documentation/en-us/red_hat_fuse/7.4/
https://access.redhat.com/errata/RHSA-2019:3244
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan