Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update

Fixed packages 1

Vulnerabilities 4

• Unscored —
  CVE-2013-4404

  cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users …

  Dec 23, 2013
• Unscored —
  CVE-2013-4405

  Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Gri…

  Dec 23, 2013
• Unscored —
  CVE-2013-4414

  Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remot…

  Dec 23, 2013
• Unscored —
  CVE-2013-4461

  SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers t…

  Dec 23, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=995038
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=998561
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=998606
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1016263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1029673
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1851.json
• report
  https://access.redhat.com/security/cve/CVE-2013-4404
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4404
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4404
• report
  https://access.redhat.com/security/cve/CVE-2013-4405
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4405
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4405
• report
  https://access.redhat.com/security/cve/CVE-2013-4414
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4414
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4414
• report
  https://access.redhat.com/security/cve/CVE-2013-4461
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4461
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4461