Red Hat Security AdvisoryRHSA-2017:0829
jboss-ec2-eap security, bug fix, and enhancement update
Released 2017-03-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server jboss-ec2-eap-7.5.14-2.Final_redhat_2.ep6.el6, jboss-ec2-eap-samples-7.5.14-2.Final_redhat_2.ep6.el6
Fixes 3 records
Priority MEDIUM 43
It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.07579 · Published 2017-02-17 · Partial fix CWE-835
Priority MEDIUM 41
RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05601 · Published 2016-09-07 · Partial fix · 3.0.20.Final
Priority LOW 34
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00423 · Published 2018-07-31 · Fixed CWE-264
