CVE-2012-3431

Related Files

Red Hat Security Advisory 2012-1301-01

Posted Sep 20, 2012

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2012-1301-01 - JBoss Enterprise Data Services Platform extends JBoss Enterprise SOA Platform to provide services for data virtualization, federation, and integration. This roll up patch serves as a cumulative upgrade for JBoss Enterprise Data Services Platform 5.3.0. It includes various bug fixes. The following security issue is also fixed with this release: It was found that the Teiid JDBC socket did not encrypt client log in messages by default. A man-in-the-middle attacker could use this flaw to obtain log in credentials and other JDBC traffic.

tags | advisory

systems | linux, redhat

advisories | CVE-2012-3431

SHA-256 | 976828574cc4e5269fed9ccf1341603216ebcf3d4163434b127cdd26adfb2e1c

Download | Favorite | View