Skip to content
OpenAdvisories
Unscored RHSA-2013:0683 1 CVE

Red Hat Security Advisory: axis security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::server axis 0:1.2.1-2jpp.7.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server axis-debuginfo 0:1.2.1-2jpp.7.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server axis-javadoc 0:1.2.1-2jpp.7.el5_9
Red Hat · RHEL 5 enterprise_linux:5::server axis-manual 0:1.2.1-2jpp.7.el5_9

Vulnerabilities 1

  • Medium —
    CVE-2012-5784

    Man-in-the-middle attack in Apache Axis

    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name…

    axis org.apache.axis:axis axis:axis Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=873252
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0683.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-5784
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-5784
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-5784