[Bug 1629083] New: CVE-2018-11775 activemq: ActiveMQ Client Missing TLS Hostname Verification
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1629083
Bug ID: 1629083
Summary: CVE-2018-11775 activemq: ActiveMQ Client Missing TLS
Hostname Verification
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: agrimm(a)gmail.com, aileenc(a)redhat.com,
alazarot(a)redhat.com, anstephe(a)redhat.com,
bkundal(a)redhat.com, bmaxwell(a)redhat.com,
bmcclain(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, csutherl(a)redhat.com,
darran.lofthouse(a)redhat.com, dblechte(a)redhat.com,
dfediuck(a)redhat.com, dimitris(a)redhat.com,
dosoudil(a)redhat.com, drieden(a)redhat.com,
eedri(a)redhat.com, etirelli(a)redhat.com,
gvarsami(a)redhat.com, hghasemb(a)redhat.com,
ibek(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jcoleman(a)redhat.com,
jshepherd(a)redhat.com, kconner(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
ldimaggi(a)redhat.com, lgao(a)redhat.com,
lpetrovi(a)redhat.com, mgoldboi(a)redhat.com,
michal.skrivanek(a)redhat.com, myarboro(a)redhat.com,
nwallace(a)redhat.com, paradhya(a)redhat.com,
pdrozd(a)redhat.com, pgier(a)redhat.com,
psakar(a)redhat.com, pslavice(a)redhat.com,
psotirop(a)redhat.com, pszubiak(a)redhat.com,
puntogil(a)libero.it, rnetuka(a)redhat.com,
rrajasek(a)redhat.com, rsvoboda(a)redhat.com,
rsynek(a)redhat.com, rwagner(a)redhat.com,
rzhang(a)redhat.com, sbonazzo(a)redhat.com,
sdaley(a)redhat.com, sherold(a)redhat.com, s(a)shk.io,
sthorger(a)redhat.com, tcunning(a)redhat.com,
tdawson(a)redhat.com, tkirby(a)redhat.com,
twalsh(a)redhat.com, vtunka(a)redhat.com, ylavi(a)redhat.com
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6
was missing which could make the client vulnerable to a MITM attack between a
Java application using the ActiveMQ client and the ActiveMQ server. This is now
enabled by default.
References:
http://activemq.apache.org/security-advisories.data/CVE-2018-11775-announ...
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1591929] New: CVE-2018-11039 springframework: Cross Site Tracing (XST ) if vulnerable to XSS
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591929
Bug ID: 1591929
Summary: CVE-2018-11039 springframework: Cross Site Tracing
(XST) if vulnerable to XSS
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to
4.3.18, and older unsupported versions) allow web applications to change the
HTTP request method to any HTTP method (including TRACE) using the
HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS
vulnerability, a malicious user (or attacker) can use this filter to escalate
to an XST (Cross Site Tracing) attack.
References:
https://pivotal.io/security/cve-2018-11039
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1591931] New: CVE-2018-11040 springframework: cross-domain requests via JSONP through AbstractJsonpResponseBodyAdvice
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591931
Bug ID: 1591931
Summary: CVE-2018-11040 springframework: cross-domain requests
via JSONP through AbstractJsonpResponseBodyAdvice
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
Spring Framework, versions 5.0.x prior to 5.0.7, versions 4.3.x prior to
4.3.18, and older unsupported versions, allows web applications to enable
cross-domain requests via JSONP (JSON with Padding) through
AbstractJsonpResponseBodyAdvice for REST controllers, and
MappingJackson2JsonView for browser requests. Both are not enabled by default
in Spring Framework nor Spring Boot. However when MappingJackson2JsonView is
configured in an application, JSONP support is automatically ready to use
through the "jsonp" and "callback" JSONP parameters, enabling cross-domain
requests.
References:
https://pivotal.io/security/cve-2018-11040
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1393454] New: CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1393454
Bug ID: 1393454
Summary: CVE-2016-1000031 Apache Commons FileUpload:
DiskFileItem file manipulation
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: abhgupta(a)redhat.com, aileenc(a)redhat.com,
alazarot(a)redhat.com, alee(a)redhat.com,
aszczucz(a)redhat.com, bdawidow(a)redhat.com,
chazlett(a)redhat.com, csutherl(a)redhat.com,
dmcphers(a)redhat.com, epp-bugs(a)redhat.com,
etirelli(a)redhat.com, felias(a)redhat.com,
gvarsami(a)redhat.com, hchiorea(a)redhat.com,
hfnukal(a)redhat.com, hhorak(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jerboaa(a)gmail.com,
jialiu(a)redhat.com, jokerman(a)redhat.com,
jolee(a)redhat.com, jorton(a)redhat.com,
jpallich(a)redhat.com, jshepherd(a)redhat.com,
kconner(a)redhat.com, krzysztof.daniel(a)gmail.com,
kseifried(a)redhat.com, kverlaen(a)redhat.com,
ldimaggi(a)redhat.com, lmeyer(a)redhat.com,
lpetrovi(a)redhat.com, mbaluch(a)redhat.com,
me(a)coolsvap.net, miburman(a)redhat.com,
mizdebsk(a)redhat.com, mmccomas(a)redhat.com,
mmraka(a)redhat.com, msimacek(a)redhat.com,
mweiler(a)redhat.com, mwinkler(a)redhat.com,
nwallace(a)redhat.com, omajid(a)redhat.com,
pavelp(a)redhat.com, rrajasek(a)redhat.com,
rwagner(a)redhat.com, rzhang(a)redhat.com,
sgehwolf(a)redhat.com,
soa-p-jira(a)post-office.corp.redhat.com,
SpikeFedora(a)gmail.com, spinder(a)redhat.com,
tcunning(a)redhat.com, theute(a)redhat.com,
tiwillia(a)redhat.com, tkirby(a)redhat.com,
trick(a)vanstaveren.us, vhalbert(a)redhat.com
There exists a Java Object in the Apache Commons FileUpload library that can be
manipulated in such a way that when it is deserialized, it can write or copy
files to disk in arbitrary locations. Furthermore, while the Object can be used
alone, this new vector can be integrated with ysoserial to upload and execute
binaries in a single deserialization call. This may or may not work depending
on an application's implementation of the FileUpload library.
External References:
http://www.tenable.com/security/research/tra-2016-12
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1591933] New: CVE-2018-11040 springframework: cross-domain requests via JSONP through AbstractJsonpResponseBodyAdvice [ fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591933
Bug ID: 1591933
Summary: CVE-2018-11040 springframework: cross-domain requests
via JSONP through AbstractJsonpResponseBodyAdvice
[fedora-all]
Product: Fedora
Version: 28
Component: springframework
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: puntogil(a)libero.it
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1591930] New: CVE-2018-11039 springframework: Cross Site Tracing (XST ) if vulnerable to XSS [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591930
Bug ID: 1591930
Summary: CVE-2018-11039 springframework: Cross Site Tracing
(XST) if vulnerable to XSS [fedora-all]
Product: Fedora
Version: 28
Component: springframework
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: puntogil(a)libero.it
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months