openshift-origin-cartridge-jbosseap-6.0 vulnerabilities (Red Hat)
15 vulnerabilities.
openshift-origin-cartridge-jbosseap-6.0Red HatRuby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068...5.0 Mediumopenshift-origin-cartridge-jbosseap-6.0Red HatRuby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent...5.0 Mediumopenshift-origin-cartridge-jbosseap-6.0Red Hatruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name2.1 Lowopenshift-origin-cartridge-jbosseap-6.0Red HatActiveRecord vulnerable to modification of protected model attributes4.3 Mediumopenshift-origin-cartridge-jbosseap-6.0Red HatActive Record allows bypassing of database-query restrictions6.4 Mediumopenshift-origin-cartridge-jbosseap-6.0Red HatRuby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without...5.0 Mediumopenshift-origin-cartridge-jbosseap-6.0Red HatThe rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0...5.0 Mediumopenshift-origin-cartridge-jbosseap-6.0Red Hatactionpack Cross-site Scripting vulnerability4.3 Mediumopenshift-origin-cartridge-jbosseap-6.0Red Hatactivesupport Cross-site Scripting vulnerability4.3 Mediumopenshift-origin-cartridge-jbosseap-6.0Red Hatactionpack Cross-site Scripting vulnerability4.3 Mediumopenshift-origin-cartridge-jbosseap-6.0Red Hatactionpack Improper Authentication vulnerability5.0 Mediumopenshift-origin-cartridge-jbosseap-6.0Red Hatactiverecord vulnerable to SQL Injection7.5 Highopenshift-origin-cartridge-jbosseap-6.0Red Hatactionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request4.3 Mediumopenshift-origin-cartridge-jbosseap-6.0Red HatActive Record vulnerable to SQL Injection via nested query parameters5.0 Mediumopenshift-origin-cartridge-jbosseap-6.0Red HatAction Pack contains database-query restrictions bypass6.4 Medium