Hide Forgot
It was found that the Apache Camel XSLT component allowed XSL stylesheets to perform calls to external Java methods. A remote attacker able to submit messages to an xslt: Camel route could use this flaw to perform arbitrary remote code execution in the context of the Camel server process.
Acknowledgements: This issue was discovered by David Jorm of the Red Hat Security Response Team.
Upstream bugs: https://issues.apache.org/jira/browse/CAMEL-7123 https://issues.apache.org/jira/browse/CAMEL-7129 Upstream patch commits: https://fisheye6.atlassian.com/changelog/camel-git?cs=e922f89290f236f3107039de61af0375826bd96d https://fisheye6.atlassian.com/changelog/camel-git?cs=2639264b28940683dfc808bf8edfb41bbceb7ad7 https://fisheye6.atlassian.com/changelog/camel-git?cs=341d4e6cca71c53c90962d1c3d45fc9e05cc50c6
External References: http://camel.apache.org/security-advisories.data/CVE-2014-0003.txt.asc
This issue has been addressed in following products: RHEL 6 Version of OpenShift Enterprise 2.0 Via RHSA-2014:0245 https://rhn.redhat.com/errata/RHSA-2014-0245.html
This issue has been addressed in following products: RHEL 6 Version of OpenShift Enterprise 1.2 Via RHSA-2014:0254 https://rhn.redhat.com/errata/RHSA-2014-0254.html
This issue has been addressed in following products: Red Hat JBoss Fuse and A-MQ 6.0.0 R1 P3 Via RHSA-2014:0323 https://rhn.redhat.com/errata/RHSA-2014-0323.html
This issue has been addressed in following products: Red Hat JBoss BPM Suite 6.0.1 Via RHSA-2014:0371 https://rhn.redhat.com/errata/RHSA-2014-0371.html
This issue has been addressed in following products: Red Hat JBoss BRMS 6.0.1 Via RHSA-2014:0372 https://rhn.redhat.com/errata/RHSA-2014-0372.html
This issue has been addressed in following products: Fuse ESB Enterprise/MQ Enterprise 7.1.0 R1 P3 Via RHSA-2014:0452 https://rhn.redhat.com/errata/RHSA-2014-0452.html
This issue has been addressed in following products: Red Hat JBoss Fuse Service Works 6.0.0 Via RHSA-2014:0459 https://rhn.redhat.com/errata/RHSA-2014-0459.html