Skip to content
OpenAdvisories
Unscored RHSA-2014:1193 1 CVE

Red Hat Security Advisory: axis security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client axis 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client axis-debuginfo 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation axis 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation axis-debuginfo 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation axis-javadoc 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation axis-manual 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server axis 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server axis-debuginfo 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server axis-javadoc 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server axis-manual 0:1.2.1-2jpp.8.el5_10
Red Hat · RHEL 6 enterprise_linux:6::client axis 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client axis-javadoc 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client axis-manual 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode axis 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode axis-javadoc 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::computenode axis-manual 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server axis 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server axis-javadoc 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server axis-manual 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation axis 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation axis-javadoc 0:1.2.1-7.5.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation axis-manual 0:1.2.1-7.5.el6_5

Vulnerabilities 1

  • Medium —
    CVE-2014-3596

    Improper Validation of Certificates in apache axis

    The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL…

    axis org.apache.axis:axis axis:axis Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/solutions/1164433
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129935
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1193.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3596
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3596
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3596