Skip to content
OpenAdvisories
Unscored RHSA-2012:0421 2 CVEs

Red Hat Security Advisory: rhevm security and bug fix update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-backend 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-config 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-dbscripts 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-debuginfo 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-genericapi 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-iso-uploader 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-jboss-deps 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-log-collector 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-notification-service 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-restapi 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-tools-common 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-userportal 0:3.0.3_0001-3.el6
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-webadmin-portal 0:3.0.3_0001-3.el6

Vulnerabilities 2

  • Medium —
    CVE-2011-5245

    Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

    The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injecti…

    org.jboss.resteasy:resteasy-jaxb-provider Maven
  • Medium —
    CVE-2012-0818

    Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

    RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.

    org.jboss.resteasy:resteasy-client Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Installation_Guide/chap-Installation_Guide-Installing_the_RHEV_Manager-Upgrades.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=785631
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0421.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-5245
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-5245
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-5245
  • report
    https://access.redhat.com/security/cve/CVE-2012-0818
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0818
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0818