CVE-2013-2165
highPriorität · verfolgen · 44EPSS 0.127 · 96. PerzentilExploit · PoCEUUSEPSS · bewertet 2026-10-27
ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRed Hat JBoss Web Framework Kit 2.3redhat_csaf
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing installation of Red Hat JBoss Enterprise Application Platform or Red Hat JBoss Web Server, and applications deployed to it. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1041 - Behobenrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-demo-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-demo-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-demo-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-demo-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-framework-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-framework-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-framework-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-framework-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-root-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-root-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-root-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-root-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-ui-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-ui-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-ui-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-ui-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Behobenrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.src as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-demo-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-demo-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-framework-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-framework-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-root-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-root-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-ui-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenrichfaces-ui-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Behobenjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.src as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.src as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-docs-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-docs-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Behobenjboss-seam2-docs-0:2.0.2.FP_SEC1-1.ep2.6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - BehobenJBoss Enterprise BRMS Platform 5.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss Enterprise Application Platform 4.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss Enterprise Application Platform 5.2redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss Operations Network 2.4redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss Operations Network 3.1redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss Portal 4.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss Portal 5.2redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss SOA Platform 4.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss SOA Platform 5.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - BehobenRed Hat JBoss Web Platform 5.2redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.8–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (1)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- Pastea/CVE-2013-2165Pastea/CVE-2013-2165PoC · poc_in_github
betroffene Produkte (152)
Betroffene Produkte und Versionsbereiche.
- redhat jboss enterprise application platform= 4.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.2nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.0.2nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.3.1nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 4.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.1.1nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
Advisories (6)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2013:1041Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.3.0 update2013-07-10csaf · redhat_csafUS
Red Hat JBoss Web Framework Kit 2.3.0, which fixes one security issue, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1042Red Hat Security Advisory: richfaces security update2013-07-10csaf · redhat_csafUS
Updated richfaces packages that fix one security issue are now available for Red Hat JBoss Enterprise Application Platform 5.2.0 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1043Red Hat Security Advisory: richfaces security update2013-07-10csaf · redhat_csafUS
Updated richfaces packages that fix one security issue are now available for Red Hat JBoss Web Platform 5.2.0 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1044Red Hat Security Advisory: jboss-seam2 security update2013-07-11csaf · redhat_csafUS
Updated jboss-seam2 packages that fix one security issue are now available for Red Hat JBoss Enterprise Application Platform 4.3.0 CP10 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1045Red Hat Security Advisory: RichFaces security update2013-07-11csaf · redhat_csafUS
An update for the RichFaces component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss Enterprise Application Platform 4.3.0 CP10 and 5.2.0; Red Hat JBoss Web Platform 5.2.0; Red Hat JBoss BRMS 5.3.1; Red Hat JBoss SOA Platform 4.3.0 CP05 and 5.3.1; Red Hat JBoss Portal 4.3 CP07 and 5.2.2; and Red Hat JBoss Operations Network 2.4.2 and 3.1.2. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- GHSA-4344-frcp-j22qRemote code execution due to insecure deserialization2022-05-13ghsa · osvUS
A flaw was found in the way JBoss RichFaces handled deserialization. A remote attacker could use this flaw to trigger the execution of the deserialization methods in any serializable class deployed on the server. This could lead to a variety of security impacts depending on the deserialization logic of these classes.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (38)
Externe Belege — Patches, Meldungen, Analysen.
- http://jvn.jp/en/jp/JVN38787103/index.htmlcnnvd
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000072cnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1041.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1042.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1043.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1044.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1045.htmlcnnvd
- http://seclists.org/fulldisclosure/2020/Mar/21cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan