Red Hat Security AdvisoryRHSA-2017:0827
Red Hat JBoss Enterprise Application Platform 6.4.14 update on RHEL 6
Released 2017-03-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server apache-cxf-2.7.18-6.SP5_redhat_1.1.ep6.el6, hornetq-2.3.25-19.SP17_redhat_1.1.ep6.el6, infinispan-5.2.21-1.Final_redhat_1.1.ep6.el6 +47
Fixes 3 records
Priority MEDIUM 43
It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.07579 · Published 2017-02-17 · Partial fix CWE-835
Priority MEDIUM 41
RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05601 · Published 2016-09-07 · Partial fix · 3.0.20.Final
Priority LOW 34
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00423 · Published 2018-07-31 · Fixed CWE-264
