1545359 – CVE-2015-3208 hornetq: XXE/SSRF in XPath selector [rhn_satellite_6.4]

Bug 1545359 - CVE-2015-3208 hornetq: XXE/SSRF in XPath selector [rhn_satellite_6.4]

Summary: CVE-2015-3208 hornetq: XXE/SSRF in XPath selector [rhn_satellite_6.4]

Keywords:
Status:	CLOSED CURRENTRELEASE
Alias:	None
Product:	Candlepin
Classification:	Community
Component:	candlepin
Sub Component:
Version:	2.1
Hardware:	Unspecified
OS:	Unspecified
Priority:	medium
Severity:	medium
Target Milestone:	---
Target Release:	---
Assignee:	candlepin-bugs
QA Contact:	Katello QA List
Docs Contact:
URL:
Whiteboard:	component:hornetq
Depends On:	1478549
Blocks:	CVE-2015-3208
TreeView+	depends on / blocked

Reported:	2018-02-14 17:46 UTC by Alex Wood
Modified:	2018-02-26 18:57 UTC (History)
CC List:	17 users (show)
Fixed In Version:	candlepin-2.3.1-1
Clone Of:	1478549
Environment:
Last Closed:	2018-02-26 18:57:40 UTC
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Private	Priority	Status	Summary	Last Updated
Github	candlepin candlepin pull 1903	0	None	None	None	2018-02-14 17:46:57 UTC

Note You need to log in before you can comment on or make changes to this bug.