Vulnerability-Lookup

RHSA-2015_0848

Vulnerability from csaf_redhat - Published: 2015-04-16 16:26 - Updated: 2024-11-25 11:57

Summary

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.0 update

Severity

Important

Notes

Topic: Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.0, and fix multiple security issues, several bugs, and add various enhancements, are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher's attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key. (CVE-2015-0226) A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink. (CVE-2015-0277) It was discovered that a JkUnmount rule for a subtree of a previous JkMount rule could be ignored. This could allow a remote attacker to potentially access a private artifact in a tree that would otherwise not be accessible to them. (CVE-2014-8111) It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request. (CVE-2015-0227) It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not accessible to them. (CVE-2014-3586) The CVE-2015-0277 issue was discovered by Ondrej Kotek of Red Hat. This release of JBoss Enterprise Application Platform also includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.4.0 Release Notes, linked to in the References. All users who require JBoss Enterprise Application Platform 6.4.0 on Red Hat Enterprise Linux 7 should install these new packages. The JBoss server process must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2014-3586

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not accessible to them.

2.1 ()


                
                  AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-732 - Incorrect Permission Assignment for Critical Resource

Affected products

Fixed 417 products

Product	Version	Remediation
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-daemon-eap6-1:1.0.15-8.redhat_1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-daemon-eap6-1:1.0.15-8.redhat_1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-io-eap6-0:2.1.0-1.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-io-eap6-0:2.1.0-1.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-lang-eap6-0:2.6.0-1.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-lang-eap6-0:2.6.0-1.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-pool-eap6-0:1.6.0-1.redhat_7.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-commons-pool-eap6-0:1.6.0-1.redhat_7.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-mime4j-0:0.6.0-1.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:apache-mime4j-0:0.6.0-1.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:atinject-eap6-0:1.0.0-1.redhat_5.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:atinject-eap6-0:1.0.0-1.redhat_5.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:codehaus-jackson-0:1.9.9-10.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:codehaus-jackson-0:1.9.9-10.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:codehaus-jackson-core-asl-0:1.9.9-10.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:codehaus-jackson-jaxrs-0:1.9.9-10.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:codehaus-jackson-mapper-asl-0:1.9.9-10.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:codehaus-jackson-xc-0:1.9.9-10.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-apache-commons-cli-0:1.2.0-1.redhat_8.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-apache-commons-cli-0:1.2.0-1.redhat_8.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-apache-commons-codec-0:1.4.0-4.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-apache-commons-codec-0:1.4.0-4.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-apache-commons-configuration-0:1.6.0-1.redhat_4.2.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-apache-commons-configuration-0:1.6.0-1.redhat_4.2.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-avro-0:1.7.5-2.redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-avro-0:1.7.5-2.redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-cal10n-0:0.7.7-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-cal10n-0:0.7.7-1.redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-ecj-0:4.4.2-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-ecj-0:4.4.2-1.redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-jandex-0:1.2.2-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-jandex-0:1.2.2-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-jansi-0:1.9.0-1.redhat_5.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-jansi-0:1.9.0-1.redhat_5.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-joda-time-0:1.6.2-2.redhat_5.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-joda-time-0:1.6.2-2.redhat_5.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-rngom-0:201103.0.0-1.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-rngom-0:201103.0.0-1.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-snakeyaml-0:1.8.0-1.redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:eap6-snakeyaml-0:1.8.0-1.redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-jaf-0:1.1.1-17.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-jaf-0:1.1.1-17.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-javamail-0:1.4.5-2.redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-javamail-0:1.4.5-2.redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-jsf-eap6-0:2.1.28-7.redhat_8.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-jsf-eap6-0:2.1.28-7.redhat_8.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-jsf12-eap6-0:1.2.15-8.b01_redhat_12.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:glassfish-jsf12-eap6-0:1.2.15-8.b01_redhat_12.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate-beanvalidation-api-0:1.0.0-5.GA_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate-beanvalidation-api-0:1.0.0-5.GA_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate-jpa-2.0-api-0:1.0.1-6.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate-jpa-2.0-api-0:1.0.1-6.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate3-commons-annotations-0:4.0.2-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate3-commons-annotations-0:4.0.2-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-core-eap6-0:4.2.18-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-eap6-0:4.2.18-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-eap6-0:4.2.18-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-entitymanager-eap6-0:4.2.18-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-envers-eap6-0:4.2.18-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-infinispan-eap6-0:4.2.18-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-search-0:4.6.0-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-search-0:4.6.0-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hornetq-0:2.3.25-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hornetq-0:2.3.25-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hornetq-native-0:2.3.25-3.Final_redhat_1.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hornetq-native-0:2.3.25-3.Final_redhat_1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hornetq-native-0:2.3.25-3.Final_redhat_1.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hornetq-native-debuginfo-0:2.3.25-3.Final_redhat_1.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:hornetq-native-debuginfo-0:2.3.25-3.Final_redhat_1.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpclient-eap6-0:4.3.6-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpcomponents-client-eap6-0:4.3.6-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpcomponents-core-eap6-0:4.3.3-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpcomponents-eap6-0:7.0.0-1.redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpcomponents-project-eap6-0:7.0.0-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpcore-eap6-0:4.3.3-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-0:2.2.26-38.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-0:2.2.26-38.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-0:2.2.26-38.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-debuginfo-0:2.2.26-38.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-debuginfo-0:2.2.26-38.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-devel-0:2.2.26-38.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-devel-0:2.2.26-38.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-manual-0:2.2.26-38.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-manual-0:2.2.26-38.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-tools-0:2.2.26-38.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpd22-tools-0:2.2.26-38.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpmime-eap6-0:4.3.6-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpserver-0:1.0.4-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:httpserver-0:1.0.4-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:infinispan-0:5.2.11-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:infinispan-0:5.2.11-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:infinispan-cachestore-jdbc-0:5.2.11-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:infinispan-cachestore-remote-0:5.2.11-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:infinispan-client-hotrod-0:5.2.11-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:infinispan-core-0:5.2.11-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-common-api-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-common-impl-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-common-spi-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-core-api-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-core-impl-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-deployers-common-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-jdbc-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-spec-api-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:ironjacamar-validator-eap6-0:1.0.31-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:javassist-eap6-0:3.18.1-6.GA_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:javassist-eap6-0:3.18.1-6.GA_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-deployment-0:1.3.0-5.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-deployment-0:1.3.0-5.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-framework-core-0:2.1.0-5.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-framework-core-0:2.1.0-5.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-metadata-0:2.2.0-4.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-metadata-0:2.2.0-4.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-repository-0:2.1.0-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-repository-0:2.1.0-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-resolver-0:3.0.1-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-resolver-0:3.0.1-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-spi-0:3.2.0-3.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-spi-0:3.2.0-3.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-vfs-0:1.2.1-5.Final_redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbosgi-vfs-0:1.2.1-5.Final_redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-aesh-0:0.33.14-1.redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-aesh-0:0.33.14-1.redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-annotations-api_1.1_spec-0:1.0.1-5.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-annotations-api_1.1_spec-0:1.0.1-5.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-appclient-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-appclient-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-cli-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-cli-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-client-all-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-client-all-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-clustering-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-clustering-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-cmp-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-cmp-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-connector-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-connector-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-console-0:2.5.5-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-console-0:2.5.5-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-controller-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-controller-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-core-security-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-core-security-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-ee-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-ee-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-embedded-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-embedded-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jdr-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jdr-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jmx-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jmx-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jpa-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jpa-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jsf-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jsf-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-logging-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-logging-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-mail-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-mail-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-messaging-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-messaging-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-naming-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-naming-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-network-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-network-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-osgi-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-osgi-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-pojo-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-pojo-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-protocol-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-protocol-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-remoting-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-remoting-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-sar-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-sar-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-security-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-security-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-server-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-server-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-threads-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-threads-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-transactions-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-transactions-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-version-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-version-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-web-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-web-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-webservices-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-webservices-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-weld-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-weld-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-xts-0:7.5.0-8.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-as-xts-0:7.5.0-8.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-classfilewriter-0:1.0.3-3.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-classfilewriter-0:1.0.3-3.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-common-beans-0:1.1.0-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-common-beans-0:1.1.0-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-common-core-1:2.2.17-11.GA_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-common-core-1:2.2.17-11.GA_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-connector-api_1.6_spec-0:1.0.1-5.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-connector-api_1.6_spec-0:1.0.1-5.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-dmr-0:1.2.2-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-dmr-0:1.2.2-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-ejb-api_3.1_spec-0:1.0.2-11.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-ejb-api_3.1_spec-0:1.0.2-11.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-ejb-client-0:1.0.30-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-ejb-client-0:1.0.30-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-genericjms-0:1.0.7-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-genericjms-0:1.0.7-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-hal-0:2.5.5-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-hal-0:2.5.5-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-iiop-client-0:1.0.0-5.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-iiop-client-0:1.0.0-5.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-interceptors-api_1.1_spec-0:1.0.1-6.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-interceptors-api_1.1_spec-0:1.0.1-6.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-j2eemgmt-api_1.1_spec-0:1.0.1-6.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-j2eemgmt-api_1.1_spec-0:1.0.1-6.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jad-api_1.2_spec-0:1.0.1-7.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jad-api_1.2_spec-0:1.0.1-7.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaspi-api_1.0_spec-0:1.0.1-7.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaspi-api_1.0_spec-0:1.0.1-7.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxb-api_2.2_spec-0:1.0.4-4.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxb-api_2.2_spec-0:1.0.4-4.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxr-api_1.0_spec-0:1.0.2-6.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxr-api_1.0_spec-0:1.0.2-6.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxrpc-api_1.1_spec-0:1.0.1-5.Final_redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxrpc-api_1.1_spec-0:1.0.1-5.Final_redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxrs-api_1.1_spec-0:1.0.1-10.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jaxrs-api_1.1_spec-0:1.0.1-10.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jms-api_1.1_spec-0:1.0.1-13.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jms-api_1.1_spec-0:1.0.1-13.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jsp-api_2.2_spec-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-jsp-api_2.2_spec-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-logging-0:3.1.4-2.GA_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-logging-0:3.1.4-2.GA_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-logmanager-0:1.5.4-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-logmanager-0:1.5.4-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-metadata-0:7.2.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-metadata-0:7.2.1-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-metadata-appclient-0:7.2.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-metadata-common-0:7.2.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-metadata-ear-0:7.2.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-metadata-ejb-0:7.2.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-metadata-web-0:7.2.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-modules-0:1.3.6-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-modules-0:1.3.6-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-osgi-logging-0:1.0.0-7.redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-osgi-logging-0:1.0.0-7.redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-remote-naming-0:1.0.10-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-remote-naming-0:1.0.10-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-rmi-api_1.0_spec-0:1.0.4-10.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-rmi-api_1.0_spec-0:1.0.4-10.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-sasl-0:1.0.5-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-sasl-0:1.0.5-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-seam-int-0:6.0.0-10.GA_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-seam-int-0:6.0.0-10.GA_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-servlet-api_2.5_spec-0:1.0.1-10.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-servlet-api_2.5_spec-0:1.0.1-10.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-servlet-api_3.0_spec-0:1.0.2-4.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-servlet-api_3.0_spec-0:1.0.2-4.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-threads-0:2.1.2-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-threads-0:2.1.2-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-transaction-api_1.1_spec-0:1.0.1-13.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-transaction-api_1.1_spec-0:1.0.1-13.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-vfs2-0:3.2.9-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-vfs2-0:3.2.9-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-weld-1.1-api-0:1.1.0-1.Final_redhat_6.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-weld-1.1-api-0:1.1.0-1.Final_redhat_6.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-xnio-base-0:3.0.13-1.GA_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jboss-xnio-base-0:3.0.13-1.GA_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-appclient-0:7.5.0-9.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-appclient-0:7.5.0-9.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-bundles-0:7.5.0-9.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-bundles-0:7.5.0-9.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-core-0:7.5.0-11.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-core-0:7.5.0-11.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-domain-0:7.5.0-9.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-domain-0:7.5.0-9.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-hornetq-native-0:2.3.25-3.Final_redhat_1.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-hornetq-native-0:2.3.25-3.Final_redhat_1.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-javadocs-0:7.5.0-23.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-javadocs-0:7.5.0-23.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-jbossweb-native-0:1.1.32-3.redhat_1.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-jbossweb-native-0:1.1.32-3.redhat_1.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.0-14.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.0-14.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-product-eap-0:7.5.0-9.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-product-eap-0:7.5.0-9.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-standalone-0:7.5.0-9.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-standalone-0:7.5.0-9.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.0-9.Final_redhat_21.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.0-9.Final_redhat_21.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossts-1:4.17.29-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossts-1:4.17.29-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossweb-0:7.5.7-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossweb-0:7.5.7-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossxb2-0:2.0.3-15.GA_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jbossxb2-0:2.0.3-15.GA_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jcip-annotations-eap6-0:1.0.0-1.redhat_7.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jcip-annotations-eap6-0:1.0.0-1.redhat_7.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jdom-eap6-0:1.1.3-1.redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jdom-eap6-0:1.1.3-1.redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jul-to-slf4j-stub-0:1.0.1-2.Final_redhat_2.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:jul-to-slf4j-stub-0:1.0.1-2.Final_redhat_2.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:log4j-jboss-logmanager-0:1.1.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:log4j-jboss-logmanager-0:1.1.1-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:lucene-solr-0:3.6.2-5.redhat_8.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:lucene-solr-0:3.6.2-5.redhat_8.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-0:1.2.11-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-0:1.2.11-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-demo-0:1.2.11-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-native-0:1.2.11-2.Final_redhat_2.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-native-0:1.2.11-2.Final_redhat_2.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-native-0:1.2.11-2.Final_redhat_2.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-native-debuginfo-0:1.2.11-2.Final_redhat_2.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_cluster-native-debuginfo-0:1.2.11-2.Final_redhat_2.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_jk-0:1.2.40-3.redhat_2.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_jk-ap22-0:1.2.40-3.redhat_2.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_jk-ap22-0:1.2.40-3.redhat_2.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_jk-debuginfo-0:1.2.40-3.redhat_2.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_jk-debuginfo-0:1.2.40-3.redhat_2.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_rt-0:2.4.1-6.GA.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_rt-0:2.4.1-6.GA.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_rt-0:2.4.1-6.GA.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_snmp-0:2.4.1-13.GA.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_snmp-0:2.4.1-13.GA.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_snmp-0:2.4.1-13.GA.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_ssl22-1:2.2.26-38.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:mod_ssl22-1:2.2.26-38.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:objectweb-asm-eap6-0:3.3.1-8.redhat_9.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:objectweb-asm-eap6-0:3.3.1-8.redhat_9.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:org.osgi.core-eap6-0:4.2.0-14.redhat_8.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:org.osgi.core-eap6-0:4.2.0-14.redhat_8.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:org.osgi.enterprise-eap6-0:4.2.0-15.redhat_10.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:org.osgi.enterprise-eap6-0:4.2.0-15.redhat_10.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketbox-0:4.1.1-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketbox-0:4.1.1-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketbox-commons-0:1.0.0-1.final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketbox-commons-0:1.0.0-1.final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketlink-bindings-0:2.5.4-5.SP4_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketlink-bindings-0:2.5.4-5.SP4_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketlink-federation-0:2.5.4-5.SP4_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:picketlink-federation-0:2.5.4-5.SP4_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:relaxngDatatype-eap6-0:2011.1.0-1.redhat_9.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:relaxngDatatype-eap6-0:2011.1.0-1.redhat_9.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:resteasy-0:2.3.10-1.Final_redhat_1.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:resteasy-0:2.3.10-1.Final_redhat_1.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:staxmapper-0:1.1.0-7.Final_redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:staxmapper-0:1.1.0-7.Final_redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-codemodel-0:2.6.0-1.redhat_3.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-codemodel-0:2.6.0-1.redhat_3.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-txw2-0:20110809.0.0-1.redhat_5.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-txw2-0:20110809.0.0-1.redhat_5.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-ws-metadata-2.0-api-0:1.0.0-2.MR1_redhat_7.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-ws-metadata-2.0-api-0:1.0.0-2.MR1_redhat_7.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-xsom-0:20110809.0.0-1.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:sun-xsom-0:20110809.0.0-1.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:tomcat-native-0:1.1.32-3.redhat_1.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:tomcat-native-0:1.1.32-3.redhat_1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:tomcat-native-0:1.1.32-3.redhat_1.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:tomcat-native-debuginfo-0:1.1.32-3.redhat_1.ep6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:tomcat-native-debuginfo-0:1.1.32-3.redhat_1.ep6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:velocity-eap6-0:1.7.0-1.redhat_4.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:velocity-eap6-0:1.7.0-1.redhat_4.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:weld-cdi-1.0-api-0:1.0.0-1.SP4_redhat_5.1.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:weld-cdi-1.0-api-0:1.0.0-1.SP4_redhat_5.1.ep6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:xml-commons-resolver-eap6-0:1.2.0-1.redhat_10.2.ep6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-JBEAP-6.4:xml-commons-resolver-eap6-0:1.2.0-1.redhat_10.2.ep6.el7.src	—	Vendor Fix fix

Threats

Impact Low

CVE-2014-8111

It was discovered that a JkUnmount rule for a subtree of a previous JkMount rule could be ignored. This could allow a remote attacker to potentially access a private artifact in a tree that would otherwise not be accessible to them.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

Fixed 417 products, the same list as for CVE-2014-3586

Threats

Impact Moderate

CVE-2015-0226

It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher's attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key.

7.8 ()


                
                  AV:N/AC:L/Au:N/C:C/I:N/A:N

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 417 products, the same list as for CVE-2014-3586

Threats

Impact Important

CVE-2015-0227

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-358 - Improperly Implemented Security Check for Standard

Affected products

Fixed 417 products, the same list as for CVE-2014-3586

Threats

Impact Moderate

CVE-2015-0277

A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink.

6.0 ()


                
                  AV:N/AC:M/Au:S/C:P/I:P/A:P

CWE-305 - Authentication Bypass by Primary Weakness

Affected products

Fixed 417 products, the same list as for CVE-2014-3586

Threats

Impact Important

CVE-2015-0298

A flaw was found in the way the mod_cluster manager processed certain MCMP messages. An attacker with access to the network from which MCMP messages are allowed to be sent could use this flaw to execute arbitrary JavaScript code in the mod_cluster manager web interface.

5.2 ()


                
                  AV:A/AC:L/Au:S/C:P/I:P/A:P

Affected products

Fixed 417 products, the same list as for CVE-2014-3586

Threats

Impact Important

CVE-2015-6254

A flaw was found in the way PicketLink's Service Provider (SP) and Identity Provider (IdP) handled certain requests. The SP and IdP in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in the SAML assertion matches the location from which the message was received. This flaw allows a remote attacker to log into a victim's account via PicketLink.

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 417 products, the same list as for CVE-2014-3586

Threats

Impact Important

References

85 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:0848	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/site/documentation/en-U…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1126687	external
https://bugzilla.redhat.com/show_bug.cgi?id=1155446	external
https://bugzilla.redhat.com/show_bug.cgi?id=1158979	external
https://bugzilla.redhat.com/show_bug.cgi?id=1165221	external
https://bugzilla.redhat.com/show_bug.cgi?id=1165229	external
https://bugzilla.redhat.com/show_bug.cgi?id=1166456	external
https://bugzilla.redhat.com/show_bug.cgi?id=1166746	external
https://bugzilla.redhat.com/show_bug.cgi?id=1167398	external
https://bugzilla.redhat.com/show_bug.cgi?id=1167920	external
https://bugzilla.redhat.com/show_bug.cgi?id=1167927	external
https://bugzilla.redhat.com/show_bug.cgi?id=1179791	external
https://bugzilla.redhat.com/show_bug.cgi?id=1179831	external
https://bugzilla.redhat.com/show_bug.cgi?id=1179838	external
https://bugzilla.redhat.com/show_bug.cgi?id=1179845	external
https://bugzilla.redhat.com/show_bug.cgi?id=1179848	external
https://bugzilla.redhat.com/show_bug.cgi?id=1182591	external
https://bugzilla.redhat.com/show_bug.cgi?id=1182975	external
https://bugzilla.redhat.com/show_bug.cgi?id=1182981	external
https://bugzilla.redhat.com/show_bug.cgi?id=1182985	external
https://bugzilla.redhat.com/show_bug.cgi?id=1182991	external
https://bugzilla.redhat.com/show_bug.cgi?id=1182995	external
https://bugzilla.redhat.com/show_bug.cgi?id=1182997	external
https://bugzilla.redhat.com/show_bug.cgi?id=1183000	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188724	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188727	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188731	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188736	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188939	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188946	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188953	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188959	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188967	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188978	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188985	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188988	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188991	external
https://bugzilla.redhat.com/show_bug.cgi?id=1188994	external
https://bugzilla.redhat.com/show_bug.cgi?id=1191446	external
https://bugzilla.redhat.com/show_bug.cgi?id=1191451	external
https://bugzilla.redhat.com/show_bug.cgi?id=1194832	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195910	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195914	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195918	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195923	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195926	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195929	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195932	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195935	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195938	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195943	external
https://bugzilla.redhat.com/show_bug.cgi?id=1195952	external
https://bugzilla.redhat.com/show_bug.cgi?id=1198251	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2014-3586	self
https://bugzilla.redhat.com/show_bug.cgi?id=1126687	external
https://www.cve.org/CVERecord?id=CVE-2014-3586	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3586	external
https://access.redhat.com/security/cve/CVE-2014-8111	self
https://bugzilla.redhat.com/show_bug.cgi?id=1182591	external
https://www.cve.org/CVERecord?id=CVE-2014-8111	external
https://nvd.nist.gov/vuln/detail/CVE-2014-8111	external
https://access.redhat.com/security/cve/CVE-2015-0226	self
https://bugzilla.redhat.com/show_bug.cgi?id=1191446	external
https://www.cve.org/CVERecord?id=CVE-2015-0226	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0226	external
https://access.redhat.com/security/cve/CVE-2015-0227	self
https://bugzilla.redhat.com/show_bug.cgi?id=1191451	external
https://www.cve.org/CVERecord?id=CVE-2015-0227	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0227	external
https://access.redhat.com/security/cve/CVE-2015-0277	self
https://bugzilla.redhat.com/show_bug.cgi?id=1194832	external
https://www.cve.org/CVERecord?id=CVE-2015-0277	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0277	external
https://access.redhat.com/security/cve/CVE-2015-0298	self
https://bugzilla.redhat.com/show_bug.cgi?id=1197769	external
https://www.cve.org/CVERecord?id=CVE-2015-0298	external
https://nvd.nist.gov/vuln/detail/CVE-2015-0298	external
https://access.redhat.com/security/cve/CVE-2015-6254	self
https://bugzilla.redhat.com/show_bug.cgi?id=1974359	external
https://www.cve.org/CVERecord?id=CVE-2015-6254	external
https://nvd.nist.gov/vuln/detail/CVE-2015-6254	external
https://issues.jboss.org/browse/PLINK-680	external

Acknowledgments

Red Hat Ondrej Kotek

JSON

To clipboard

Loading 1.2 MB of JSON…

CVE-2014-3586 (GCVE-0-2014-3586)

Vulnerability from cvelistv5 – Published: 2015-04-21 17:00 – Updated: 2024-08-06 10:50

Summary

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

6 references

URL	Tags
http://www.securitytracker.com/id/1032183	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-0849.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0848.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0846.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1126687	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0847.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:17.739Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1032183",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032183"
          },
          {
            "name": "RHSA-2015:0849",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
          },
          {
            "name": "RHSA-2015:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
          },
          {
            "name": "RHSA-2015:0846",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1126687"
          },
          {
            "name": "RHSA-2015:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-05-04T20:57:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "1032183",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032183"
        },
        {
          "name": "RHSA-2015:0849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
        },
        {
          "name": "RHSA-2015:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
        },
        {
          "name": "RHSA-2015:0846",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1126687"
        },
        {
          "name": "RHSA-2015:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3586",
    "datePublished": "2015-04-21T17:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:17.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8111 (GCVE-0-2014-8111)

Vulnerability from cvelistv5 – Published: 2015-04-21 17:00 – Updated: 2024-08-06 13:10

Summary

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

14 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1641.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0849.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3278	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-0848.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0846.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1642.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0847.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/74265	vdb-entryx_refsource_BID
https://lists.apache.org/thread.html/ba661b0edd91…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8d2a579bbd97…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/277d42b48b6e…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/5b7a23e245c9…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rf8e8c091182…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r5c616dfc491…	mailing-listx_refsource_MLIST

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.835Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1641",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1641.html"
          },
          {
            "name": "RHSA-2015:0849",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
          },
          {
            "name": "DSA-3278",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3278"
          },
          {
            "name": "RHSA-2015:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
          },
          {
            "name": "RHSA-2015:0846",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
          },
          {
            "name": "RHSA-2015:1642",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1642.html"
          },
          {
            "name": "RHSA-2015:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
          },
          {
            "name": "74265",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74265"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190413 svn commit: r1857494 [18/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190415 svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-13T16:10:17.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2015:1641",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1641.html"
        },
        {
          "name": "RHSA-2015:0849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
        },
        {
          "name": "DSA-3278",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3278"
        },
        {
          "name": "RHSA-2015:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
        },
        {
          "name": "RHSA-2015:0846",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
        },
        {
          "name": "RHSA-2015:1642",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1642.html"
        },
        {
          "name": "RHSA-2015:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
        },
        {
          "name": "74265",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74265"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190413 svn commit: r1857494 [18/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190415 svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-8111",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1641",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1641.html"
            },
            {
              "name": "RHSA-2015:0849",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
            },
            {
              "name": "DSA-3278",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3278"
            },
            {
              "name": "RHSA-2015:0848",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
            },
            {
              "name": "RHSA-2015:0846",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
            },
            {
              "name": "RHSA-2015:1642",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1642.html"
            },
            {
              "name": "RHSA-2015:0847",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
            },
            {
              "name": "74265",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74265"
            },
            {
              "name": "[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190325 svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190413 svn commit: r1857494 [18/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190415 svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200213 svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c@%3Cdev.tomcat.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8111",
    "datePublished": "2015-04-21T17:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:50.835Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0226 (GCVE-0-2015-0226)

Vulnerability from cvelistv5 – Published: 2017-10-30 14:00 – Updated: 2024-08-06 04:03

Summary

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

11 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:1376	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0849.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1176.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1177.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0848.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0846.html	vendor-advisoryx_refsource_REDHAT
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
https://ws.apache.org/wss4j/advisories/CVE-2015-0…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0847.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/72553	vdb-entryx_refsource_BID
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC

Date Public

2015-02-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.543Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1376",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1376"
          },
          {
            "name": "RHSA-2015:0849",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
          },
          {
            "name": "RHSA-2015:1176",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
          },
          {
            "name": "RHSA-2015:1177",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
          },
          {
            "name": "RHSA-2015:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
          },
          {
            "name": "RHSA-2015:0846",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc"
          },
          {
            "name": "RHSA-2015:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
          },
          {
            "name": "72553",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72553"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T22:31:30.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:1376",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1376"
        },
        {
          "name": "RHSA-2015:0849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
        },
        {
          "name": "RHSA-2015:1176",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
        },
        {
          "name": "RHSA-2015:1177",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
        },
        {
          "name": "RHSA-2015:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
        },
        {
          "name": "RHSA-2015:0846",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc"
        },
        {
          "name": "RHSA-2015:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
        },
        {
          "name": "72553",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72553"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0226",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:1376",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1376"
            },
            {
              "name": "RHSA-2015:0849",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
            },
            {
              "name": "RHSA-2015:1176",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
            },
            {
              "name": "RHSA-2015:1177",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
            },
            {
              "name": "RHSA-2015:0848",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
            },
            {
              "name": "RHSA-2015:0846",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us"
            },
            {
              "name": "https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc",
              "refsource": "CONFIRM",
              "url": "https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc"
            },
            {
              "name": "RHSA-2015:0847",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
            },
            {
              "name": "72553",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72553"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0226",
    "datePublished": "2017-10-30T14:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0227 (GCVE-0-2015-0227)

Vulnerability from cvelistv5 – Published: 2015-02-12 16:00 – Updated: 2024-08-06 04:03

Summary

Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

12 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-0773.html	vendor-advisoryx_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://rhn.redhat.com/errata/RHSA-2015-0849.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1176.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1177.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0848.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0846.html	vendor-advisoryx_refsource_REDHAT
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
http://ws.apache.org/wss4j/advisories/CVE-2015-02…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/72557	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-0847.html	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC

Date Public

2015-02-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.283Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:0773",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html"
          },
          {
            "name": "apache-wss4j-sec-bypass(100837)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100837"
          },
          {
            "name": "RHSA-2015:0849",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
          },
          {
            "name": "RHSA-2015:1176",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
          },
          {
            "name": "RHSA-2015:1177",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
          },
          {
            "name": "RHSA-2015:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
          },
          {
            "name": "RHSA-2015:0846",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://ws.apache.org/wss4j/advisories/CVE-2015-0227.txt.asc"
          },
          {
            "name": "72557",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72557"
          },
          {
            "name": "RHSA-2015:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to \"wrapping attacks.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T22:31:30.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2015:0773",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html"
        },
        {
          "name": "apache-wss4j-sec-bypass(100837)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100837"
        },
        {
          "name": "RHSA-2015:0849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
        },
        {
          "name": "RHSA-2015:1176",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
        },
        {
          "name": "RHSA-2015:1177",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
        },
        {
          "name": "RHSA-2015:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
        },
        {
          "name": "RHSA-2015:0846",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://ws.apache.org/wss4j/advisories/CVE-2015-0227.txt.asc"
        },
        {
          "name": "72557",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72557"
        },
        {
          "name": "RHSA-2015:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0227",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to \"wrapping attacks.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:0773",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html"
            },
            {
              "name": "apache-wss4j-sec-bypass(100837)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100837"
            },
            {
              "name": "RHSA-2015:0849",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
            },
            {
              "name": "RHSA-2015:1176",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
            },
            {
              "name": "RHSA-2015:1177",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
            },
            {
              "name": "RHSA-2015:0848",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
            },
            {
              "name": "RHSA-2015:0846",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03900en_us"
            },
            {
              "name": "http://ws.apache.org/wss4j/advisories/CVE-2015-0227.txt.asc",
              "refsource": "CONFIRM",
              "url": "http://ws.apache.org/wss4j/advisories/CVE-2015-0227.txt.asc"
            },
            {
              "name": "72557",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72557"
            },
            {
              "name": "RHSA-2015:0847",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0227",
    "datePublished": "2015-02-12T16:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.283Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0277 (GCVE-0-2015-0277)

Vulnerability from cvelistv5 – Published: 2015-08-17 20:00 – Updated: 2024-08-06 04:03

Summary

The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

6 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-0849.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0848.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0846.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1194832	x_refsource_CONFIRM
https://issues.jboss.org/browse/PLINK-678	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0847.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.883Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:0849",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
          },
          {
            "name": "RHSA-2015:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
          },
          {
            "name": "RHSA-2015:0846",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.jboss.org/browse/PLINK-678"
          },
          {
            "name": "RHSA-2015:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users\u0027 accounts via a crafted SAML assertion.  NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-08-17T19:57:03.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2015:0849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
        },
        {
          "name": "RHSA-2015:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
        },
        {
          "name": "RHSA-2015:0846",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.jboss.org/browse/PLINK-678"
        },
        {
          "name": "RHSA-2015:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0277",
    "datePublished": "2015-08-17T20:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.883Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0298 (GCVE-0-2015-0298)

Vulnerability from cvelistv5 – Published: 2015-08-24 14:00 – Updated: 2024-08-06 04:03

Summary

Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

3 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1641.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1642.html	vendor-advisoryx_refsource_REDHAT
https://issues.jboss.org/browse/MODCLUSTER-453	x_refsource_CONFIRM

Date Public

2015-05-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.942Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1641",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1641.html"
          },
          {
            "name": "RHSA-2015:1642",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1642.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.jboss.org/browse/MODCLUSTER-453"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-08-24T13:57:02.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2015:1641",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1641.html"
        },
        {
          "name": "RHSA-2015:1642",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1642.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.jboss.org/browse/MODCLUSTER-453"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0298",
    "datePublished": "2015-08-24T14:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.942Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-6254 (GCVE-0-2015-6254)

Vulnerability from cvelistv5 – Published: 2015-08-17 20:00 – Updated: 2024-08-06 07:15

Summary

The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://issues.jboss.org/browse/PLINK-680	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0849.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0848.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-0846.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1194832	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-0847.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:15:13.276Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.jboss.org/browse/PLINK-680"
          },
          {
            "name": "RHSA-2015:0849",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
          },
          {
            "name": "RHSA-2015:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
          },
          {
            "name": "RHSA-2015:0846",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194832"
          },
          {
            "name": "RHSA-2015:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors.  NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-08-17T19:57:03.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.jboss.org/browse/PLINK-680"
        },
        {
          "name": "RHSA-2015:0849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
        },
        {
          "name": "RHSA-2015:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
        },
        {
          "name": "RHSA-2015:0846",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194832"
        },
        {
          "name": "RHSA-2015:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-6254",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors.  NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://issues.jboss.org/browse/PLINK-680",
              "refsource": "CONFIRM",
              "url": "https://issues.jboss.org/browse/PLINK-680"
            },
            {
              "name": "RHSA-2015:0849",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
            },
            {
              "name": "RHSA-2015:0848",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
            },
            {
              "name": "RHSA-2015:0846",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1194832",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194832"
            },
            {
              "name": "RHSA-2015:0847",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-6254",
    "datePublished": "2015-08-17T20:00:00.000Z",
    "dateReserved": "2015-08-17T00:00:00.000Z",
    "dateUpdated": "2024-08-06T07:15:13.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2015_0848

CVE-2014-3586 (GCVE-0-2014-3586)

CVE-2014-8111 (GCVE-0-2014-8111)

CVE-2015-0226 (GCVE-0-2015-0226)

CVE-2015-0227 (GCVE-0-2015-0227)

CVE-2015-0277 (GCVE-0-2015-0277)

CVE-2015-0298 (GCVE-0-2015-0298)

CVE-2015-6254 (GCVE-0-2015-6254)

Tags

Sightings

Nomenclature