Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP09 update
JBoss Enterprise Application Platform (JBEAP) 4.3.0.CP09, which fixes three security issues and multiple bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2010-3878US | medium4.3 | — | ||
Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote att… | ||||
| CVE-2010-3862US | low2.6 | — | ||
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Ha… | ||||
| CVE-2010-3708US | high7.5 | — | ||
The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://docs.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3/html-single/Release_Notes_CP09/index.htmlexternal
- https://access.redhat.com/errata/RHSA-2010:0939self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 604617external
- 633859external
- 641389external
- Canonical URLself
Behebungen (3)
- BehobenRed Hat JBoss Enterprise Application Platform 4.3
JBoss Enterprise Application Platform 4.3.0.CP09 is available from the Red Hat Customer Portal. To download and install the complete JBEAP 4.3.0.CP09 distribution: 1) Log into the Customer Portal: https://access.redhat.com/login 2) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 3) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.3.0.GA_CP09". 4) Select the desired installation method, for example the binary installer.
https://access.redhat.com/errata/RHSA-2010:0939 - BehobenRed Hat JBoss Enterprise Application Platform 4.3
JBoss Enterprise Application Platform 4.3.0.CP09 is available from the Red Hat Customer Portal. To download and install the complete JBEAP 4.3.0.CP09 distribution: 1) Log into the Customer Portal: https://access.redhat.com/login 2) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 3) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.3.0.GA_CP09". 4) Select the desired installation method, for example the binary installer.
https://access.redhat.com/errata/RHSA-2010:0939 - BehobenRed Hat JBoss Enterprise Application Platform 4.3
JBoss Enterprise Application Platform 4.3.0.CP09 is available from the Red Hat Customer Portal. To download and install the complete JBEAP 4.3.0.CP09 distribution: 1) Log into the Customer Portal: https://access.redhat.com/login 2) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 3) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.3.0.GA_CP09". 4) Select the desired installation method, for example the binary installer.
https://access.redhat.com/errata/RHSA-2010:0939
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan