Red Hat Security Advisory

RHSA-2015:0920

Red Hat JBoss Operations Network 3.3.2 update

Released 2015-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Operations Network 3.3

Fixes 3 records

TI-2014-06737 CVE-2014-8122 · GHSA-338v-3958-8v8r

Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote…

LOW 24

Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02051 Published 2015-02-13 Partial fix · 2.2.8 CWE-362

TI-2014-06526 CVE-2014-7853 · GHSA-7cr6-g5pc-g6g4

The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise…

LOW 21

The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain at…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0124 Published 2015-02-13 Partial fix CWE-200

TI-2014-06522 CVE-2014-7849 · GHSA-5938-95q9-6rh3

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application…

LOW 21

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, mo…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0126 Published 2015-02-13 Partial fix CWE-264