Skip to content
OpenAdvisories
Unscored RHSA-2013:0269 1 CVE

Red Hat Security Advisory: axis security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client axis 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client axis-javadoc 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client axis-manual 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode axis 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode axis-javadoc 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode axis-manual 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server axis 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server axis-javadoc 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server axis-manual 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation axis 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation axis-javadoc 0:1.2.1-7.3.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation axis-manual 0:1.2.1-7.3.el6_3

Vulnerabilities 1

  • Medium —
    CVE-2012-5784

    Man-in-the-middle attack in Apache Axis

    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name…

    axis org.apache.axis:axis axis:axis Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=873252
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0269.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-5784
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-5784
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-5784