Red Hat Security Advisory

RHSA-2017:0173

eap7-jboss-ec2-eap security update

Released 2017-01-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 Server eap7-jboss-ec2-eap-7.0.4-5.GA_redhat_2.ep7.el6, eap7-jboss-ec2-eap-samples-7.0.4-5.GA_redhat_2.ep7.el6
Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7 Server eap7-jboss-ec2-eap-7.0.4-5.GA_redhat_2.ep7.el7, eap7-jboss-ec2-eap-samples-7.0.4-5.GA_redhat_2.ep7.el7

Fixes 2 records

TI-2016-07089 CVE-2016-8627 · GHSA-wmq3-659r-46hg

Uncontrolled resource consumption in [UNKNOWN] admin-cli

LOW 34

admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02556 Published 2018-05-11 Fixed CWE-400

TI-2016-06068 CVE-2016-7061 · GHSA-35gg-hfjv-3g6c

Information disclosure in Red Hat EAP

LOW 32

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01766 Published 2018-09-10 Fixed CWE-200