Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update
Red Hat JBoss Fuse and A-MQ 6.2.1 Rollup Patch 3, which fixes two security issues and includes several bug fixes and various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-0782US | medium5.4 | — | ||
The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scriptin… | ||||
| CVE-2016-0734US | medium6.1 | — | ||
The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickj… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2016:1424self
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.amq&downloadType=securityPatches&version=6.2.1external
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.fuse&downloadType=securityPatches&version=6.2.1external
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1317516external
- 1317520external
- ENTMQ-1665external
- Canonical URLself
remediations (4)
- FixedRed Hat JBoss A-MQ 6.2
The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2016:1424 - FixedRed Hat JBoss A-MQ 6.2
The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2016:1424 - FixedRed Hat JBoss Fuse 6.2
The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2016:1424 - FixedRed Hat JBoss Fuse 6.2
The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2016:1424
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan