The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1695 advisory.

    jakarta-taglibs-standard is the Java Standard Tag Library (JSTL).
    This library is used in conjunction with Tomcat and Java Server Pages     (JSP).

    It was found that the Java Standard Tag Library (JSTL) allowed the     processing of untrusted XML documents to utilize external entity     references, which could access resources on the host system and,     potentially, allowing arbitrary code execution. (CVE-2015-0254)

    Note: jakarta-taglibs-standard users may need to take additional steps     after applying this update. Detailed instructions on the additional steps     can be found here:

    https://access.redhat.com/solutions/1584363

    All jakarta-taglibs-standard users are advised to upgrade to these updated     packages, which contain a backported patch to correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 / 7 : jakarta-taglibs-standard (RHSA-2015:1695)

high Nessus Plugin ID 85718

Version 2.18