CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix
Published Sep 4, 2014
4.3
MEDIUMCVSS 2.0
EPSS 5.82%
Description
http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5783.
Affected products
No data.
- ≥ 4.0 · ≤ 4.2.2
No data.
JBEWP 5 for RHEL 5
apache-cxf-0:2.2.12-14.patch_09.ep5.el5
Fixed · RHSA-2014:1833
JBEWP 5 for RHEL 5
jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5
Fixed · RHSA-2014:1320
JBEWP 5 for RHEL 5
jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5
Fixed · RHSA-2014:1320
JBEWP 5 for RHEL 6
apache-cxf-0:2.2.12-14.patch_09.el6
Fixed · RHSA-2014:1833
JBEWP 5 for RHEL 6
jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5
Fixed · RHSA-2014:1320
JBEWP 5 for RHEL 6
jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6
Fixed · RHSA-2014:1320
RHEV Manager version 3.5
org.ovirt.engine-root-0:3.5.0-29
Fixed · RHSA-2015:0158
Red Hat Developer Toolset 2.1 for RHEL 6
devtoolset-2-httpcomponents-client-0:4.2.1-6.el6
Fixed · RHSA-2014:1098
Red Hat JBoss BPMS 6.0
cxf
Fixed · RHSA-2015:0851
Red Hat JBoss BPMS 6.0
httpclient
Fixed · RHSA-2015:0234
Red Hat JBoss BPMS 6.0
jakarta-commons-httpclient
Fixed · RHSA-2014:1892
Red Hat JBoss BPMS 6.0
jakarta-commons-httpclient
Fixed · RHSA-2015:0851
Red Hat JBoss BRMS 6.0
cxf
Fixed · RHSA-2015:0850
Red Hat JBoss BRMS 6.0
httpclient
Fixed · RHSA-2015:0235
Red Hat JBoss BRMS 6.0
jakarta-commons-httpclient
Fixed · RHSA-2015:0850
Red Hat JBoss BRMS 6.0
jakarta-commons-httpclient
Fixed · RHSA-2014:1891
Red Hat JBoss Data Virtualization 6.0
httpclient
Fixed · RHSA-2015:0765
Red Hat JBoss Data Virtualization 6.1
n/a
Fixed · RHSA-2015:0675
Red Hat JBoss Enterprise Application Platform 5 for RHEL 5
apache-cxf-0:2.2.12-14.patch_09.ep5.el5
Fixed · RHSA-2014:1834
Red Hat JBoss Enterprise Application Platform 5 for RHEL 5
jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5
Fixed · RHSA-2014:1321
Red Hat JBoss Enterprise Application Platform 5 for RHEL 5
jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5
Fixed · RHSA-2014:1321
Red Hat JBoss Enterprise Application Platform 5 for RHEL 6
apache-cxf-0:2.2.12-14.patch_09.el6
Fixed · RHSA-2014:1834
Red Hat JBoss Enterprise Application Platform 5 for RHEL 6
jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5
Fixed · RHSA-2014:1321
Red Hat JBoss Enterprise Application Platform 5 for RHEL 6
jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6
Fixed · RHSA-2014:1321
Red Hat JBoss Enterprise Application Platform 5.2
n/a
Fixed · RHSA-2014:1836
Red Hat JBoss Enterprise Application Platform 5.2
httpclient
Fixed · RHSA-2014:1323
Red Hat JBoss Enterprise Application Platform 5.2
jakarta-commons-httpclient
Fixed · RHSA-2014:1323
Red Hat JBoss Enterprise Application Platform 6.3
n/a
Fixed · RHSA-2014:2020
Red Hat JBoss Enterprise Application Platform 6.3
n/a
Fixed · RHSA-2014:1163
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5
apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5
Fixed · RHSA-2014:2019
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5
httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5
Fixed · RHSA-2014:1162
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5
wss4j-0:1.6.16-2.redhat_3.1.ep6.el5
Fixed · RHSA-2014:2019
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6
apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6
Fixed · RHSA-2014:2019
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6
httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6
Fixed · RHSA-2014:1162
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6
wss4j-0:1.6.16-2.redhat_3.1.ep6.el6
Fixed · RHSA-2014:2019
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7
apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7
Fixed · RHSA-2014:2019
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7
httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7
Fixed · RHSA-2014:1162
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7
wss4j-0:1.6.16-2.redhat_3.1.ep6.el7
Fixed · RHSA-2014:2019
Red Hat JBoss Fuse Service Works 6.0
httpclient
Fixed · RHSA-2015:0720
Red Hat JBoss Operations Network 3.3
httpclient
Fixed · RHSA-2014:1904
Red Hat JBoss Operations Network 3.3
jakarta-commons-httpclient
Fixed · RHSA-2014:1904
Red Hat JBoss Portal 6.2
httpclient
Fixed · RHSA-2015:1009
Red Hat JBoss SOA Platform 5.3
cxf
Fixed · RHSA-2015:1888
Red Hat JBoss SOA Platform 5.3
httpclient
Fixed · RHSA-2015:1888
Red Hat JBoss SOA Platform 5.3
jakarta-commons-httpclient
Fixed · RHSA-2015:1888
Red Hat JBoss Web Framework Kit 2.7
httpclient
Fixed · RHSA-2015:0125
Red Hat JBoss Web Platform 5.2
n/a
Fixed · RHSA-2014:1835
Red Hat JBoss Web Platform 5.2
httpclient
Fixed · RHSA-2014:1322
Red Hat JBoss Web Platform 5.2
jakarta-commons-httpclient
Fixed · RHSA-2014:1322
OpenShift Enterprise 1
jakarta-commons-httpclient
Will not fix
OpenShift Enterprise 1
wagon-http
Not affected
Red Hat Enterprise Linux 5
jakarta-commons-httpclient
Not affected
Red Hat Enterprise Linux 6
jakarta-commons-httpclient
Not affected
Red Hat Enterprise Linux 7
httpcomponents-client
Not affected
Red Hat Enterprise Linux 7
jakarta-commons-httpclient
Not affected
Red Hat Enterprise Virtualization 3
redhat-support-plugin-rhev
Affected
Red Hat Enterprise Virtualization 3
rhevm-dependencies
Affected
Red Hat JBoss BRMS 5
cxf
Affected
Red Hat JBoss BRMS 5
httpclient
Will not fix
Red Hat JBoss BRMS 5
jakarta-commons-httpclient
Will not fix
Red Hat JBoss BRMS 5
modeshape-client
Will not fix
Red Hat JBoss Data Grid 6
cxf
Affected
Red Hat JBoss Data Grid 6
httpclient
Affected
Red Hat JBoss Data Virtualization 6
cxf
Affected
Red Hat JBoss Data Virtualization 6
modeshape-client
Fix deferred
Red Hat JBoss Enterprise Application Platform 4
jakarta-commons-httpclient
Will not fix
Red Hat JBoss Enterprise Application Platform 5
cxf
Affected
Red Hat JBoss Enterprise Application Platform 6
cxf
Affected
Red Hat JBoss Enterprise Application Platform 6
jakarta-commons-httpclient
Fix deferred
Red Hat JBoss Enterprise Web Server 1
jakarta-commons-httpclient
Will not fix
Red Hat JBoss Fuse Service Works 6
cxf
Affected
Red Hat JBoss Operations Network 3
cxf
Affected
Red Hat JBoss Portal 5
httpclient
Affected
Red Hat JBoss Portal 5
jakarta-commons-httpclient
Affected
Red Hat JBoss Portal 6
cxf
Affected
Red Hat JBoss SOA Platform 4
jakarta-commons-httpclient
Will not fix
Red Hat OpenShift Enterprise 2
httpclient
Not affected
Red Hat OpenShift Enterprise 2
jakarta-commons-httpclient
Affected
Red Hat OpenShift Enterprise 2
wagon-http
Not affected
Red Hat Satellite 5
jakarta-commons-httpclient
Affected
Red Hat Satellite 6
httpcomponents-client
Affected
Red Hat Software Collections
maven30-httpcomponents-client
Not affected
Red Hat Software Collections
maven30-jakarta-commons-httpclient
Not affected
Red Hat Software Collections
thermostat1-httpcomponents-client
Not affected
Red Hat Storage 2
rhevm-dependencies
Will not fix
Red Hat Storage 3
rhevm-dependencies
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| JBEWP 5 for RHEL 5 | apache-cxf-0:2.2.12-14.patch_09.ep5.el5 | Fixed | RHSA-2014:1833 |
| JBEWP 5 for RHEL 5 | jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5 | Fixed | RHSA-2014:1320 |
| JBEWP 5 for RHEL 5 | jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5 | Fixed | RHSA-2014:1320 |
| JBEWP 5 for RHEL 6 | apache-cxf-0:2.2.12-14.patch_09.el6 | Fixed | RHSA-2014:1833 |
| JBEWP 5 for RHEL 6 | jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5 | Fixed | RHSA-2014:1320 |
| JBEWP 5 for RHEL 6 | jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6 | Fixed | RHSA-2014:1320 |
| RHEV Manager version 3.5 | org.ovirt.engine-root-0:3.5.0-29 | Fixed | RHSA-2015:0158 |
| Red Hat Developer Toolset 2.1 for RHEL 6 | devtoolset-2-httpcomponents-client-0:4.2.1-6.el6 | Fixed | RHSA-2014:1098 |
| Red Hat JBoss BPMS 6.0 | cxf | Fixed | RHSA-2015:0851 |
| Red Hat JBoss BPMS 6.0 | httpclient | Fixed | RHSA-2015:0234 |
| Red Hat JBoss BPMS 6.0 | jakarta-commons-httpclient | Fixed | RHSA-2014:1892 |
| Red Hat JBoss BPMS 6.0 | jakarta-commons-httpclient | Fixed | RHSA-2015:0851 |
| Red Hat JBoss BRMS 6.0 | cxf | Fixed | RHSA-2015:0850 |
| Red Hat JBoss BRMS 6.0 | httpclient | Fixed | RHSA-2015:0235 |
| Red Hat JBoss BRMS 6.0 | jakarta-commons-httpclient | Fixed | RHSA-2015:0850 |
| Red Hat JBoss BRMS 6.0 | jakarta-commons-httpclient | Fixed | RHSA-2014:1891 |
| Red Hat JBoss Data Virtualization 6.0 | httpclient | Fixed | RHSA-2015:0765 |
| Red Hat JBoss Data Virtualization 6.1 | n/a | Fixed | RHSA-2015:0675 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 | apache-cxf-0:2.2.12-14.patch_09.ep5.el5 | Fixed | RHSA-2014:1834 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 | jakarta-commons-httpclient-1:3.1-4_patch_02.ep5.el5 | Fixed | RHSA-2014:1321 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 | jboss-seam2-0:2.2.6.EAP5-22_patch_01.ep5.el5 | Fixed | RHSA-2014:1321 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 | apache-cxf-0:2.2.12-14.patch_09.el6 | Fixed | RHSA-2014:1834 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 | jakarta-commons-httpclient-1:3.1-4_patch_02.el6_5 | Fixed | RHSA-2014:1321 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 | jboss-seam2-0:2.2.6.EAP5-22_patch_01.el6 | Fixed | RHSA-2014:1321 |
| Red Hat JBoss Enterprise Application Platform 5.2 | n/a | Fixed | RHSA-2014:1836 |
| Red Hat JBoss Enterprise Application Platform 5.2 | httpclient | Fixed | RHSA-2014:1323 |
| Red Hat JBoss Enterprise Application Platform 5.2 | jakarta-commons-httpclient | Fixed | RHSA-2014:1323 |
| Red Hat JBoss Enterprise Application Platform 6.3 | n/a | Fixed | RHSA-2014:2020 |
| Red Hat JBoss Enterprise Application Platform 6.3 | n/a | Fixed | RHSA-2014:1163 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 | apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el5 | Fixed | RHSA-2014:2019 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 | httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5 | Fixed | RHSA-2014:1162 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 | wss4j-0:1.6.16-2.redhat_3.1.ep6.el5 | Fixed | RHSA-2014:2019 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 | apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el6 | Fixed | RHSA-2014:2019 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 | httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6 | Fixed | RHSA-2014:1162 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 | wss4j-0:1.6.16-2.redhat_3.1.ep6.el6 | Fixed | RHSA-2014:2019 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 | apache-cxf-0:2.7.12-1.SP1_redhat_5.1.ep6.el7 | Fixed | RHSA-2014:2019 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 | httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7 | Fixed | RHSA-2014:1162 |
| Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 | wss4j-0:1.6.16-2.redhat_3.1.ep6.el7 | Fixed | RHSA-2014:2019 |
| Red Hat JBoss Fuse Service Works 6.0 | httpclient | Fixed | RHSA-2015:0720 |
| Red Hat JBoss Operations Network 3.3 | httpclient | Fixed | RHSA-2014:1904 |
| Red Hat JBoss Operations Network 3.3 | jakarta-commons-httpclient | Fixed | RHSA-2014:1904 |
| Red Hat JBoss Portal 6.2 | httpclient | Fixed | RHSA-2015:1009 |
| Red Hat JBoss SOA Platform 5.3 | cxf | Fixed | RHSA-2015:1888 |
| Red Hat JBoss SOA Platform 5.3 | httpclient | Fixed | RHSA-2015:1888 |
| Red Hat JBoss SOA Platform 5.3 | jakarta-commons-httpclient | Fixed | RHSA-2015:1888 |
| Red Hat JBoss Web Framework Kit 2.7 | httpclient | Fixed | RHSA-2015:0125 |
| Red Hat JBoss Web Platform 5.2 | n/a | Fixed | RHSA-2014:1835 |
| Red Hat JBoss Web Platform 5.2 | httpclient | Fixed | RHSA-2014:1322 |
| Red Hat JBoss Web Platform 5.2 | jakarta-commons-httpclient | Fixed | RHSA-2014:1322 |
| OpenShift Enterprise 1 | jakarta-commons-httpclient | Will not fix | n/a |
| OpenShift Enterprise 1 | wagon-http | Not affected | n/a |
| Red Hat Enterprise Linux 5 | jakarta-commons-httpclient | Not affected | n/a |
| Red Hat Enterprise Linux 6 | jakarta-commons-httpclient | Not affected | n/a |
| Red Hat Enterprise Linux 7 | httpcomponents-client | Not affected | n/a |
| Red Hat Enterprise Linux 7 | jakarta-commons-httpclient | Not affected | n/a |
| Red Hat Enterprise Virtualization 3 | redhat-support-plugin-rhev | Affected | n/a |
| Red Hat Enterprise Virtualization 3 | rhevm-dependencies | Affected | n/a |
| Red Hat JBoss BRMS 5 | cxf | Affected | n/a |
| Red Hat JBoss BRMS 5 | httpclient | Will not fix | n/a |
| Red Hat JBoss BRMS 5 | jakarta-commons-httpclient | Will not fix | n/a |
| Red Hat JBoss BRMS 5 | modeshape-client | Will not fix | n/a |
| Red Hat JBoss Data Grid 6 | cxf | Affected | n/a |
| Red Hat JBoss Data Grid 6 | httpclient | Affected | n/a |
| Red Hat JBoss Data Virtualization 6 | cxf | Affected | n/a |
| Red Hat JBoss Data Virtualization 6 | modeshape-client | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 4 | jakarta-commons-httpclient | Will not fix | n/a |
| Red Hat JBoss Enterprise Application Platform 5 | cxf | Affected | n/a |
| Red Hat JBoss Enterprise Application Platform 6 | cxf | Affected | n/a |
| Red Hat JBoss Enterprise Application Platform 6 | jakarta-commons-httpclient | Fix deferred | n/a |
| Red Hat JBoss Enterprise Web Server 1 | jakarta-commons-httpclient | Will not fix | n/a |
| Red Hat JBoss Fuse Service Works 6 | cxf | Affected | n/a |
| Red Hat JBoss Operations Network 3 | cxf | Affected | n/a |
| Red Hat JBoss Portal 5 | httpclient | Affected | n/a |
| Red Hat JBoss Portal 5 | jakarta-commons-httpclient | Affected | n/a |
| Red Hat JBoss Portal 6 | cxf | Affected | n/a |
| Red Hat JBoss SOA Platform 4 | jakarta-commons-httpclient | Will not fix | n/a |
| Red Hat OpenShift Enterprise 2 | httpclient | Not affected | n/a |
| Red Hat OpenShift Enterprise 2 | jakarta-commons-httpclient | Affected | n/a |
| Red Hat OpenShift Enterprise 2 | wagon-http | Not affected | n/a |
| Red Hat Satellite 5 | jakarta-commons-httpclient | Affected | n/a |
| Red Hat Satellite 6 | httpcomponents-client | Affected | n/a |
| Red Hat Software Collections | maven30-httpcomponents-client | Not affected | n/a |
| Red Hat Software Collections | maven30-jakarta-commons-httpclient | Not affected | n/a |
| Red Hat Software Collections | thermostat1-httpcomponents-client | Not affected | n/a |
| Red Hat Storage 2 | rhevm-dependencies | Will not fix | n/a |
| Red Hat Storage 3 | rhevm-dependencies | Will not fix | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533 This issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue. This issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7. Red Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ Fuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
AV:N/AC:M/Au:N/C:N/I:P/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (11 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 5.82% (0.05818) | 92.92th | v5 (v2026.06.15) |
| Jun 15, 2026 | 5.80% (0.05796) | 92.12th | v5 (v2026.06.15) |
| Oct 29, 2025 | 1.25% (0.01248) | 78.64th | v4 (v2025.03.14) |
| Mar 30, 2025 | 2.47% (0.02472) | 83.86th | v4 (v2025.03.14) |
| Mar 29, 2025 | 10.46% (0.10455) | 88.64th | v4 (v2025.03.14) |
| Mar 17, 2025 | 2.47% (0.02472) | 84.18th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.15% (0.00149) | 52.41th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.15% (0.00154) | 49.90th | v3 (v2023.03.01) |
| Mar 6, 2023 | 5.24% (0.05242) | 89.75th | v2 (v2022.01.01) |
| Apr 1, 2022 | 5.24% (0.05242) | 88.72th | v2 (v2022.01.01) |
| Feb 4, 2022 | 5.24% (0.05242) | 75.28th | v2 (v2022.01.01) |
References (27)
- http://rhn.redhat.com/errata/RHSA-2014-1098.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1833.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1834.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1835.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1836.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1891.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1892.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0125.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0158.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0675.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0720.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0765.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0850.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0851.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1888.html vendor-advisoryx_refsource_REDHAT
- http://svn.apache.org/viewvc?view=revision&revision=1411705 x_refsource_CONFIRMVendor Advisory
- http://www.securityfocus.com/bid/69257 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-2769-1 vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2012-6153 Vendor Advisory
- https://access.redhat.com/solutions/1165533 x_refsource_CONFIRMThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1129916 x_refsource_CONFIRMIssue TrackingThird Party Advisory
- https://github.com/advisories/GHSA-2x83-r56g-cv47 Advisory
- https://github.com/apache/httpcomponents-client/commit/6e14fc146a66e0f3eb362f45f95d1a58ee18886a
- https://github.com/apache/httpcomponents-client/commit/b930227f907af1198765fc47beabbddae344ca7b
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564 x_refsource_CONFIRMThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2012-6153
- https://www.cve.org/CVERecord?id=CVE-2012-6153
Change history (0)
No recorded changes yet.