فا

‫ Red Hat update for Red Hat JBoss BPM Suite

IRCAD2014043235

Number:IRCAD2014043235
Date: 2014/04/04

Software:

Red Hat JBoss BPM Suite 6.x

Description

Red Hat has issued an update for Red Hat JBoss BPM Suite. This fixes multiple vulnerabilities, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to disclose potentially sensitive information and compromise a vulnerable system.

1) An error when handling MVEL or Drools expressions can be exploited to inject and execute arbitrary Java code in the context of the application server.

Solution:

Update to version 6.0.1 (please see the vendor's advisory for details).

Resources:

RHSA-2014:0371-1:

secunia:
 

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 17 فروردین 1393

امتیاز

امتیاز شما
تعداد امتیازها:0