sun-txw2 vulnerabilities (Red Hat)
31 vulnerabilities.
-
sun-txw2Red Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... 6.5 Medium -
sun-txw2Red Hat Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J 7.5 High -
sun-txw2Red Hat Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2... 4.3 Medium -
sun-txw2Red Hat The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not... 6.0 Medium -
sun-txw2Red Hat The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an... 6.0 Medium -
sun-txw2Red Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... 6.0 Medium -
sun-txw2Red Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... 5.0 Medium -
sun-txw2Red Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... 4.0 Medium -
sun-txw2Red Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... 5.0 Medium -
sun-txw2Red Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... 4.3 Medium -
sun-txw2Red Hat Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous... 5.0 Medium -
sun-txw2Red Hat The default configuration for the Command Line Interface in Red Hat Enterprise Application... 2.1 Low -
sun-txw2Red Hat Improper Access Control in Apache WSS4J 5.0 Medium -
sun-txw2Red Hat The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used... 4.9 Medium -
sun-txw2Red Hat The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise... 5.5 Medium -
sun-txw2Red Hat The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,... 5.0 Medium -
sun-txw2Red Hat Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote... 6.8 Medium -
sun-txw2Red Hat The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP... 4.3 Medium -
sun-txw2Red Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks 4.3 Medium -
sun-txw2Red Hat Netty denial of service vulnerability 5.0 Medium -
sun-txw2Red Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces 5.8 Medium -
sun-txw2Red Hat Improper Input Validation in Apache Tomcat 6.4 Medium -
sun-txw2Red Hat Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass 5.3 Medium -
sun-txw2Red Hat Jboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization 6.5 Medium -
sun-txw2Red Hat Improper Authentication in Apache CXF 4.3 Medium -
sun-txw2Red Hat XML Signature/Encryption Not Validated in Apache CXF 10.0 High -
sun-txw2Red Hat User confusion in IronJacamar 4.3 Medium -
sun-txw2Red Hat Remote web-service operation execution in Apache CXF 4.3 Medium -
sun-txw2Red Hat Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in... 2.6 Low -
sun-txw2Red Hat Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,... 2.1 Low -
sun-txw2Red Hat Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server... 4.3 Medium