CVE-2012-0818
The MITRE CVE dictionary describes this issue as:
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
Find out more about CVE-2012-0818 from the MITRE CVE dictionary dictionary and NIST NVD.
CVSS v2 metrics
| Base Score | 5 |
|---|---|
| Base Metrics | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| Access Vector | Network |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | None |
| Availability Impact | None |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat JBoss BPMS 6.0 | RHSA-2014:0371 | 2014-04-03 |
| Red Hat JBoss Portal 5.2 | RHSA-2012:0519 | 2012-04-25 |
| Red Hat JBoss Enterprise Application Platform 5.1 | RHSA-2012:1056 | 2012-07-05 |
| Red Hat JBoss SOA Platform 5.3 | RHSA-2012:1125 | 2012-07-31 |
| Red Hat Storage Console 2.1 | RHSA-2013:1263 | 2013-09-16 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS (resteasy) | RHSA-2012:1059 | 2012-07-05 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server (resteasy) | RHSA-2012:1059 | 2012-07-05 |
| Red Hat JBoss Web Platform 5 for RHEL 4 AS (resteasy) | RHSA-2012:1058 | 2012-07-05 |
| JBoss Enterprise BRMS Platform 5.2 | RHSA-2012:0441 | 2012-04-02 |
| Red Hat JBoss Web Platform 5 for RHEL 6 Server (resteasy) | RHSA-2012:1058 | 2012-07-05 |
| Red Hat JBoss Web Platform 5.1 | RHSA-2012:1057 | 2012-07-05 |
| Red Hat JBoss Web Platform 5 for RHEL 5 Server (resteasy) | RHSA-2012:1058 | 2012-07-05 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server (resteasy) | RHSA-2012:1059 | 2012-07-05 |
| RHEV Manager 3 (org.ovirt.engine-root) | RHSA-2012:0421 | 2012-03-26 |
| Red Hat JBoss BRMS 6.0 | RHSA-2014:0372 | 2014-04-03 |
Affected Packages State
| Platform | Package | State |
|---|---|---|
| Red Hat JBoss Enterprise SOA Platform 5 | Security | Will not fix |
| Red Hat JBoss Data Virtualization 6 | Teiid | Will not fix |
CVE description copyright © 2017, The MITRE Corporation