CVE-2013-2165
highpriority · track · 44EPSS 0.127 · 96 %ileexploit · PoCEUUSEPSS · scored 2026-10-27
ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRed Hat JBoss Web Framework Kit 2.3redhat_csaf
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing installation of Red Hat JBoss Enterprise Application Platform or Red Hat JBoss Web Server, and applications deployed to it. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1041 - Fixedrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-11.SP3_patch_01.ep5.el4.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.src as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-demo-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-demo-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-demo-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-demo-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-framework-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-framework-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-framework-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-framework-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-root-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-root-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-root-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-root-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-ui-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-ui-0:3.3.1-11.SP3_patch_01.ep5.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-ui-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-ui-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1042 - Fixedrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-0:3.3.1-3.SP3_patch_01.ep5.el6.src as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-0:3.3.1-6.SP3_patch_01.ep5.el5.src as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-demo-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-demo-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-framework-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-framework-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-root-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-root-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-ui-0:3.3.1-3.SP3_patch_01.ep5.el6.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 6 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedrichfaces-ui-0:3.3.1-6.SP3_patch_01.ep5.el5.noarch as a component of Red Hat JBoss Web Platform 5 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1043 - Fixedjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.src as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4.src as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-docs-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ASredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-docs-0:2.0.2.FP_SEC1-1.ep2.6.el4.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ESredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - Fixedjboss-seam2-docs-0:2.0.2.FP_SEC1-1.ep2.6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Serverredhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:1044 - FixedJBoss Enterprise BRMS Platform 5.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss Enterprise Application Platform 4.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss Enterprise Application Platform 5.2redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss Operations Network 2.4redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss Operations Network 3.1redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss Portal 4.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss Portal 5.2redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss SOA Platform 4.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss SOA Platform 5.3redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045 - FixedRed Hat JBoss Web Platform 5.2redhat_csaf
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2013:1045
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.8–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
- Pastea/CVE-2013-2165Pastea/CVE-2013-2165PoC · poc_in_github
affected products (152)
Products and version ranges known to be affected.
- redhat jboss enterprise application platform= 4.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.1nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.1.2nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise application platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.0.2nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.2.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise brms platform= 5.3.1nvdUScpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 4.3.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.0.1nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.1.0nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
- redhat jboss enterprise portal platform= 5.1.1nvdUScpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
advisories (6)
Vendor and ecosystem advisories describing this.
- RHSA-2013:1041Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.3.0 update2013-07-10csaf · redhat_csafUS
Red Hat JBoss Web Framework Kit 2.3.0, which fixes one security issue, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1042Red Hat Security Advisory: richfaces security update2013-07-10csaf · redhat_csafUS
Updated richfaces packages that fix one security issue are now available for Red Hat JBoss Enterprise Application Platform 5.2.0 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1043Red Hat Security Advisory: richfaces security update2013-07-10csaf · redhat_csafUS
Updated richfaces packages that fix one security issue are now available for Red Hat JBoss Web Platform 5.2.0 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1044Red Hat Security Advisory: jboss-seam2 security update2013-07-11csaf · redhat_csafUS
Updated jboss-seam2 packages that fix one security issue are now available for Red Hat JBoss Enterprise Application Platform 4.3.0 CP10 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- RHSA-2013:1045Red Hat Security Advisory: RichFaces security update2013-07-11csaf · redhat_csafUS
An update for the RichFaces component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss Enterprise Application Platform 4.3.0 CP10 and 5.2.0; Red Hat JBoss Web Platform 5.2.0; Red Hat JBoss BRMS 5.3.1; Red Hat JBoss SOA Platform 4.3.0 CP05 and 5.3.1; Red Hat JBoss Portal 4.3 CP07 and 5.2.2; and Red Hat JBoss Operations Network 2.4.2 and 3.1.2. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- GHSA-4344-frcp-j22qRemote code execution due to insecure deserialization2022-05-13ghsa · osvUS
A flaw was found in the way JBoss RichFaces handled deserialization. A remote attacker could use this flaw to trigger the execution of the deserialization methods in any serializable class deployed on the server. This could lead to a variety of security impacts depending on the deserialization logic of these classes.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (38)
External citations — patches, advisories, analysis.
- http://jvn.jp/en/jp/JVN38787103/index.htmlcnnvd
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000072cnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1041.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1042.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1043.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1044.htmlcnnvd
- http://rhn.redhat.com/errata/RHSA-2013-1045.htmlcnnvd
- http://seclists.org/fulldisclosure/2020/Mar/21cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan