CVE-2012-0818
Fixed in a distro release EPSS 3%
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
Products: redhat resteasy
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jboss.resteasy:resteasy-client | 2.3.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 5 | resteasy | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | resteasy | 0:1.2.1-10.CP02_patch01.1.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | resteasy | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | resteasy-examples | 0:1.2.1-10.CP02_patch01.1.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | resteasy-examples | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | resteasy-examples | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | resteasy-javadoc | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | resteasy-javadoc | 0:1.2.1-10.CP02_patch01.1.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | resteasy-javadoc | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | resteasy-manual | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | resteasy-manual | 0:1.2.1-10.CP02_patch01.1.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | resteasy-manual | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | resteasy | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | resteasy | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | resteasy-examples | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | resteasy-examples | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | resteasy-javadoc | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | resteasy-javadoc | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | resteasy-manual | 0:1.2.1-10.CP02_patch01.1.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | resteasy-manual | 0:1.2.1-10.CP02_patch01.1.ep5.el6 |
| Red Hat rhev manager 3 | rhevm | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-backend | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-config | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-dbscripts | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-debuginfo | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-genericapi | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-iso-uploader | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-jboss-deps | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-log-collector | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-notification-service | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-restapi | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-setup | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-tools-common | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-userportal | 0:3.0.3_0001-3.el6 |
| Red Hat rhev manager 3 | rhevm-webadmin-portal | 0:3.0.3_0001-3.el6 |
| Red Hat storage 2.1 console el6 | otopi | 0:1.1.0-1.el6ev |
| Red Hat storage 2.1 console el6 | otopi-devel | 0:1.1.0-1.el6ev |
| Red Hat storage 2.1 console el6 | otopi-java | 0:1.1.0-1.el6ev |
| Red Hat storage 2.1 console el6 | otopi-repolib | 0:1.1.0-1.el6ev |
| Red Hat storage 2.1 console el6 | ovirt-host-deploy | 0:1.1.0-1.el6ev |
| Red Hat storage 2.1 console el6 | ovirt-host-deploy-java | 0:1.1.0-1.el6ev |
| Red Hat storage 2.1 console el6 | ovirt-host-deploy-repolib | 0:1.1.0-1.el6ev |
| Red Hat storage 2.1 console el6 | python-daemon | 0:1.5.2-1.el6 |
| Red Hat storage 2.1 console el6 | python-kitchen | 0:1.1.1-2.el6ev |
| Red Hat storage 2.1 console el6 | python-lockfile | 0:0.8-5.el6 |
| Red Hat storage 2.1 console el6 | python-ply | 0:3.3-7.el6ev |
| Red Hat storage 2.1 console el6 | redhat-access-plugin-storage | 0:2.1.0-0.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc | 0:2.1.0-0.bb10.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-backend | 0:2.1.0-0.bb10.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-cli | 0:2.1.0.0-0.bb3a.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-dbscripts | 0:2.1.0-0.bb10.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-log-collector | 0:2.1-0.1.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-restapi | 0:2.1.0-0.bb10.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-sdk | 0:2.1.0.0-0.bb3a.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-setup | 0:2.1.0-0.bb10.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-tools | 0:2.1.0-0.bb10.el6rhs |
| Red Hat storage 2.1 console el6 | rhsc-webadmin-portal | 0:2.1.0-0.bb10.el6rhs |