Skip to content
OpenAdvisories
Unscored RHSA-2014:0037 2 CVEs

Red Hat Security Advisory: jasperreports-server-pro security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Rhev Manager 3 rhev_manager:3 jasperreports-server-pro 0:5.5.0-4.el6ev

Vulnerabilities 2

  • Medium —
    CVE-2012-5784

    Man-in-the-middle attack in Apache Axis

    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name…

    axis org.apache.axis:axis axis:axis Debian Maven
  • Low —
    CVE-2013-2192

    Improper Authentication in Apache Hadoop

    The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensiti…

    org.apache.hadoop:hadoop-common Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.3/html/Technical_Notes/chap-RHSA-20140037_-_jasperreports.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=873252
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=967349
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=977642
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=988210
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1001326
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1020340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1033090
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0037.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-5784
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-5784
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-5784
  • report
    https://access.redhat.com/security/cve/CVE-2013-2192
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2192
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2192