Red Hat Security Advisory

RHSA-2017:0832

JBoss Enterprise Application Platform 7.0.5 on RHEL 7

Released 2017-03-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7 Server eap7-activemq-artemis-1.1.0-16.SP19_redhat_1.1.ep7.el7, eap7-activemq-artemis-cli-1.1.0-16.SP19_redhat_1.1.ep7.el7, eap7-activemq-artemis-commons-1.1.0-16.SP19_redhat_1.1.ep7.el7 +47

Fixes 2 records

TI-2016-07810 CVE-2016-9589 · GHSA-p4xg-cpr9-vwvj

Uncontrolled resource consumption in Red Hat wildfly

LOW 38

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02965 Published 2018-03-12 Fixed in 11.0.0.Beta1 CWE-400

TI-2016-07118 CVE-2016-8656 · GHSA-v2jx-53jj-4vjf

Improper access control in jbossas

LOW 34

Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00346 Published 2018-05-22 Partial fix CWE-284