Red Hat Security AdvisoryRHSA-2016:1434
Red Hat JBoss Enterprise Application Platform update
Released 2016-07-18 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server apache-cxf-2.7.18-2.SP1_redhat_1.1.ep6.el7, glassfish-jsf-eap6-2.1.28-11.SP10_redhat_1.1.ep6.el7, hibernate4-validator-4.3.3-1.Final_redhat_1.1.ep6.el7 +47
Fixes 2 records
Priority MEDIUM 50
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04698 · Published 2016-06-30 · Partial fix · 3.6.10.Final, 3.2.16.Final CWE-20
Priority LOW 34
Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and lis…
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.12555 · Published 2016-02-25 · Partial fix · 8.0.27, 7.0.65 +1 CWE-22
