Red Hat Security Advisory

RHSA-2017:1253

Red Hat JBoss Enterprise Application Platform 6.4.15 update on RHEL 7

Released 2017-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server hibernate4-core-eap6-4.2.26-1.Final_redhat_1.1.ep6.el7, hibernate4-eap6-4.2.26-1.Final_redhat_1.1.ep6.el7, hibernate4-entitymanager-eap6-4.2.26-1.Final_redhat_1.1.ep6.el7 +47

Fixes 1 record

TI-2016-07827 CVE-2016-9606 · GHSA-hgjr-xwj3-jfvw

Improper input validation in Red Hat RESTEasy

MEDIUM 44

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0597 Published 2018-03-09 Partial fix · 3.1.2.Final CWE-20