Red Hat Security AdvisoryRHSA-2015:2540
Red Hat JBoss Enterprise Application Platform 6.4.5 update
Released 2015-12-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server apache-commons-collections-eap6-3.2.1-18.redhat_7.1.ep6.el7, hibernate4-core-eap6-4.2.21-1.Final_redhat_1.1.ep6.el7, hibernate4-eap6-4.2.21-1.Final_redhat_1.1.ep6.el7 +47
Fixes 2 records
Priority HIGH 84
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Ope…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.85562 · Published 2017-11-09 · Partial fix · 3.2.2, 4.1 CWE-502
Priority LOW 20
Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01795 · Published 2015-12-16 · Fixed CWE-264
