title: Red Hat Security Advisory: JBoss Enterprise SOA Platform 5.3.0 update
description: OpenSSO: unspecified vulnerability in the authentication component OpenSSO: unspecified vulnerability in the authentication component JNDI: unauthenticated remote write access is permitted by default jruby: hash table collisions DoS (oCERT-2011-003) RESTEasy: XML eXternal Entity (XXE) flaw OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors RESTEasy: XML eXternal Entity (XXE) flaw JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started
cpes: cpe:/a:redhat:jboss_soa_platform:5.3