CVE-2018-9159

Related Files

Red Hat Security Advisory 2018-2405-01

Posted Aug 15, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2405-01 - Red Hat Fuse Integration Services provides a set of tools and containerized xPaaS images that enable development, deployment, and management of integration microservices within OpenShift. Security fix: undertow: Client can use bogus uri in Digest authentication spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code Issues addressed include bypass, deserialization, and file disclosure vulnerabilities.

tags | advisory, java, arbitrary, vulnerability

systems | linux, redhat

advisories | CVE-2017-12196, CVE-2017-8046, CVE-2018-1199, CVE-2018-1295, CVE-2018-9159

SHA-256 | 22636c0c9a281b66fbd3d47e07d655863a099b143f205af9a4652c4f6965646b

Download | Favorite | View

Red Hat Security Advisory 2018-2020-01

Posted Jun 26, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2020-01 - Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications. This patch is an update to Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. It includes bug fixes and enhancements, which are documented in the readme.txt file included with the patch files. Issues addressed include a file disclosure vulnerability.

tags | advisory

systems | linux, redhat

advisories | CVE-2018-9159

SHA-256 | 134d8a5b2ddc7d417cababde0f0cac534b88c2372bb7e3c04258d447a81ea2bc

Download | Favorite | View