Skip to content
OpenAdvisories
High CVE-2011-2730 EUVD-2022-5641GHSA-wv88-pf73-x22p

Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

Published Dec 5, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Package: org.springframework:spring-core Ecosystem: Maven

Description

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka "Expression Language Injection."

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 libspring-2.5-java 2.5.6.SEC02-2+squeeze1 DSA-2504-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat JBoss Web Platform 5 aopalliance 1.0-5.2.jdk6.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 apache-cxf 2.2.12-6.1.patch_04.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 bsh2 +1 2.0-0.b4.15.patch01.ep5.el6 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 glassfish-jaxb 2.1.12-12_patch_03.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 google-guice 2.0-3.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 hibernate3 +1 1:3.3.2-1.5.GA_CP05.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 hibernate3-annotations +1 3.4.0-3.3.GA_CP05.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 hibernate3-entitymanager +1 3.4.0-4.4.GA_CP05.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 hibernate3-search +1 3.1.1-2.3.GA_CP05.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 hsqldb 2:1.8.0.10-11_patch_01.1.ep5.el6 RHSA-2013:0195
Red Hat JBoss Web Platform 5 jacorb-jboss 2.3.2-2.jboss_1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 javassist 3.12.0-6.SP1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-aop2 2.1.6-5.CP06.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-bootstrap 1.0.2-1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-cache-core 3.2.11-1.GA.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-cache-pojo 3.0.1-1.ep5.el6 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-cl 2.0.11-1.GA.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-cluster-ha-server-api 1.2.1-2.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-common-beans 1.0.1-2.Final.ep5.el6 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-common-core 2.2.21-1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-eap5-native 5.2.0-6.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-cache 1.0.0-4.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-core 1.3.9-0.4.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-ext-api 1.0.0-4.1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-ext-api-impl 1.0.0-3.7.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-interceptors 1.0.9-0.1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-metadata 1.0.0-3.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-metrics-deployer 1.1.1-0.1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-security 1.0.2-0.5.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-timeout +2 0.1.1-0.5.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-ejb3-transactions 1.0.2-1.4.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-javaee +8 5.0.2-2.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-jaxrpc-api_1.1_spec 1.0.0-16.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-jpa-deployers 1.0.0-6.SP2.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-logmanager 1.1.2-6.GA_patch_01.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-naming 5.0.3-5.CP02.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-reflect 2.0.4-2.ep5.el6 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-remoting 2.5.4-10.SP4.1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-seam2 +3 2.2.6.EAP5-9.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-security-negotiation 2.1.3-1.GA.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-security-spi 1:2.0.5-4.SP3_1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jboss-vfs2 2.2.1-2.GA.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossas-web +3 5.2.0-7.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossas-ws-cxf-ewp 5.2.0-7.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbosssx2 2.0.5-8.SP3_1.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossts +1 1:4.6.1-12.CP13.7.ep5.el6 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossweb +4 2.1.13-2_patch_01.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossws 3.1.2-13.SP15_patch_01.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossws-common 1.1.0-9.SP10.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossws-framework 3.1.2-9.SP13.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jbossws-spi 1.1.2-6.SP8.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jgroups 1:2.6.22-1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jopr-embedded 1.3.4-19.SP6.9.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jopr-hibernate-plugin 3.0.0-14.EmbJopr5.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 jopr-jboss-cache-v3-plugin 3.0.0-15.EmbJopr5.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 mod_cluster +4 1.0.10-12.2.GA_CP04.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 mod_cluster-native 1.0.10-10.GA_CP04_patch01.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 picketlink-federation 2.1.5-3.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 picketlink-quickstarts +3 2.1.5-1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 resteasy +3 1.2.1-17.CP02_patch02.1.ep5.el6 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 rh-ewp-docs +1 5.2.0-6.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 rhq +14 3.0.0-21.EmbJopr5.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 rhq-helpers +8 3.0.0-21.EmbJopr5.ep5.el6 RHSA-2013:0195
Red Hat JBoss Web Platform 5 rhq-jmx-plugin 3.0.0-21.EmbJopr5.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 rhq-platform-plugin +1 3.0.0-14.EmbJopr5.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 spring2 +6 2.5.6-9.SEC03.1.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 wss4j 1.5.12-4_patch_02.ep5.el6 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 xerces-j2 +1 2.9.1-10.patch02.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 xml-commons +8 1.3.04-8.2_patch_01.ep5.el5 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss Web Platform 5 xml-security 1.5.1-2.ep5.el4 RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195
Red Hat JBoss EAP 5 aopalliance 1.0-5.2.jdk6.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 apache-cxf 2.2.12-6.1.patch_04.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 bsh2 +1 2.0-0.b4.15.patch01.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 glassfish-jaxb 2.1.12-12_patch_03.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 google-guice 2.0-3.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 hibernate3 +1 1:3.3.2-1.5.GA_CP05.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 hibernate3-annotations +1 3.4.0-3.3.GA_CP05.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 hibernate3-entitymanager +1 3.4.0-4.4.GA_CP05.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 hibernate3-search +1 3.1.1-2.3.GA_CP05.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 hornetq 2.2.24-1.EAP.GA.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 hornetq-native 2.2.20-1.EAP.GA.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 hsqldb 2:1.8.0.10-11_patch_01.1.ep5.el6 RHSA-2013:0191
Red Hat JBoss EAP 5 jacorb-jboss 2.3.2-2.jboss_1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 javassist 3.12.0-6.SP1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-aop2 2.1.6-5.CP06.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-bootstrap 1.0.2-1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-cache-core 3.2.11-1.GA.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-cache-pojo 3.0.1-1.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-cl 2.0.11-1.GA.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-cluster-ha-server-api 1.2.1-2.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-common-beans 1.0.1-2.Final.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-common-core 2.2.21-1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-eap5-native 5.2.0-6.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-cache 1.0.0-4.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-core 1.3.9-0.4.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-ext-api 1.0.0-4.1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-ext-api-impl 1.0.0-3.7.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-interceptors 1.0.9-0.1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-metadata 1.0.0-3.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-metrics-deployer 1.1.1-0.1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-security 1.0.2-0.5.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-timeout +2 0.1.1-0.5.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-ejb3-transactions 1.0.2-1.4.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-javaee +8 5.0.2-2.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-jaxrpc-api_1.1_spec 1.0.0-16.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-jpa-deployers 1.0.0-6.SP2.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-logmanager 1.1.2-6.GA_patch_01.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-messaging 1.4.8-12.SP9.1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-naming 5.0.3-5.CP02.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-reflect 2.0.4-2.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-remoting 2.5.4-10.SP4.1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-seam2 +3 2.2.6.EAP5-9.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-security-negotiation 2.1.3-1.GA.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-security-spi 1:2.0.5-4.SP3_1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jboss-vfs2 2.2.1-2.GA.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossas +3 5.2.0-14.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossas-hornetq 5.2.0-5.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossas-tp-licenses 5.2.0-7.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossas-ws-cxf 5.2.0-7.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbosssx2 2.0.5-8.SP3_1.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossts +1 1:4.6.1-12.CP13.7.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossweb +4 2.1.13-2_patch_01.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossws 3.1.2-13.SP15_patch_01.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossws-common 1.1.0-9.SP10.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossws-framework 3.1.2-9.SP13.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jbossws-spi 1.1.2-6.SP8.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jgroups 1:2.6.22-1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jopr-embedded 1.3.4-19.SP6.9.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jopr-hibernate-plugin 3.0.0-14.EmbJopr5.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 jopr-jboss-cache-v3-plugin 3.0.0-15.EmbJopr5.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 mod_cluster +4 1.0.10-12.2.GA_CP04.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 mod_cluster-native 1.0.10-10.GA_CP04_patch01.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 netty 3.2.5-6.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 picketlink-federation 2.1.5-3.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 picketlink-quickstarts +3 2.1.5-1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 resteasy +3 1.2.1-17.CP02_patch02.1.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 rh-eap-docs +1 5.2.0-6.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 rhq +23 3.0.0-21.EmbJopr5.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 rhq-jmx-plugin 3.0.0-21.EmbJopr5.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 rhq-platform-plugin +1 3.0.0-14.EmbJopr5.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 spring2 +6 2.5.6-9.SEC03.1.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 wss4j 1.5.12-4_patch_02.ep5.el6 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 xerces-j2 2.9.1-10.patch02.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 xerces-j2-scripts 2.9.1-10.patch02.ep5.el5 RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 xml-commons +8 1.3.04-8.2_patch_01.ep5.el5 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191
Red Hat JBoss EAP 5 xml-security 1.5.1-2.ep5.el4 RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.springframework:spring-core >= 3.0.0, < 3.0.6 3.0.6 GHSA-wv88-pf73-x22p
Maven org.springframework:spring-core < 2.5.6.SEC03 2.5.6.SEC03 GHSA-wv88-pf73-x22p
Maven org.springframework:spring-core >= 2.5.7.SR0, < 2.5.7.SR023 2.5.7.SR023 GHSA-wv88-pf73-x22p

Advisories 7

References