Red Hat Hibernate Validator CVE-2014-3558 Local Privilege Escalation Vulnerability

Bugtraq ID:	70101
Class:	Design Error
CVE:	CVE-2014-3558
Remote:	No
Local:	Yes
Published:	Sep 16 2014 12:00AM
Updated:	Sep 16 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Redhat JBoss Enterprise Application Platform 6.3 Redhat JBoss Enterprise Application Platform 6 EL6 Redhat JBoss Enterprise Application Platform 6 EL5 Redhat Hibernate Validator 5.1.1 Redhat Hibernate Validator 5.1.0 Redhat Hibernate Validator 4.3.1 Redhat Enterprise Virtualization Manager 3.2 Redhat Enterprise Virtualization 3.2 Redhat Enterprise Virtualization 3
Not Vulnerable:	Redhat JBoss Enterprise Application Platform 6.3.1 Redhat Hibernate Validator 5.2.0

Red Hat Hibernate Validator CVE-2014-3558 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Red Hat Hibernate Validator CVE-2014-3558 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Red Hat Hibernate Validator CVE-2014-3558 Local Privilege Escalation Vulnerability

References:

• Hibernate Validator Homepage (Red Hat)
  
• Red Hat Homepage (Red Hat)
  
• RHSA-2014:1285 Low: Red Hat JBoss Enterprise Application Platform 6.3.1 update (Red Hat)
  
• RHSA-2014:1286 Low: Red Hat JBoss Enterprise Application Platform 6.3.1 update (Red Hat)
  
• RHSA-2014:1287 Low: Red Hat JBoss Enterprise Application Platform 6.3.1 update (Red Hat)
  
• RHSA-2014:1288 Low: Red Hat JBoss Enterprise Application Platform 6.3.1 update (Red Hat)