Lucene search

K
redhatRedHatRHSA-2014:0216
HistoryFeb 26, 2014 - 8:31 p.m.

(RHSA-2014:0216) Important: XStream security update

2014-02-2620:31:01
access.redhat.com
25

EPSS

0.409

Percentile

97.4%

XStream is a simple library to serialize and de-serialize objects to and
from XML.

It was found that XStream could deserialize arbitrary user-supplied XML
content, representing objects of any type. A remote attacker able to pass
XML to XStream could use this flaw to perform a variety of attacks,
including remote code execution in the context of the server running the
XStream application. (CVE-2013-7285)

All users of Red Hat JBoss Fuse Service Works 6.0.0 as provided from the
Red Hat Customer Portal are advised to apply this update.