Bug 984364

Summary:	jgroups: CVE-2013-4112 JGroups: Authentication via cached credentials [brms-5]
Product:	[JBoss] JBoss Enterprise BRMS Platform 5	Reporter:	Arun Babu Neelicattu <aneelica>
Component:	Security	Assignee:	trev <tkirby>
Status:	CLOSED NOTABUG	QA Contact:	Lukáš Petrovický <lpetrovi>
Severity:	low	Docs Contact:
Priority:	low
Version:	BRMS 5.3.1	CC:	brms-jira, grocha, security-response-team
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	component:jgroups
Fixed In Version:		Doc Type:	Release Note
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-07-17 04:02:17 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	983489

Description Arun Babu Neelicattu 2013-07-15 05:16:35 UTC

brms-5 tracking bug for jgroups: see blocks bug list for full details of the security issue(s).

This bug is never intended to be made public, please put any public notes
in the blocked bugs.

[bug automatically created by: add-tracking-bugs]

Comment 1 Arun Babu Neelicattu 2013-07-15 06:19:10 UTC

EAP-5 fix is handled in [jira JBPAPP-10817]

Comment 2 Arun Babu Neelicattu 2013-07-17 03:50:06 UTC

This is to be considered as a security hardening fix.