title: Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update
description: jasypt: Vulnerable to timing attack against the password hash comparison jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper hibernate-validator: Privilege escalation when running under the security manager
cpes: cpe:/o:redhat:enterprise_linux:7::hypervisor