Does CVE-2012-5575 affect JBoss?
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- Red Hat JBoss SOA Platform (SOA-P)
- Red Hat JBoss Web Platform
Issue
- Are JBoss products affected by CVE-2012-5575?
- Can you please confirm whether we need to apply a patch for the above mentioned CVE for EAP 5.1.2.GA?
Resolution
It affects mainly JBossWS WS Security.
-
EAP 5.1.2: Download the patch for CVE-2012-5575, CVE-2011-1096 and CVE-2011-2487 from the support portal.
-
Fixes for CVE-2012-5575, CVE-2011-1096 & CVE-2011-2487 are available in the following GA releases:
-
EAP 6.x is not affected by the referenced CVEs.
This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.