Red Hat Security Advisory

RHSA-2017:1260

jboss-ec2-eap security, bug fix, and enhancement update

Released 2017-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server jboss-ec2-eap-7.5.15-3.Final_redhat_3.ep6.el6, jboss-ec2-eap-samples-7.5.15-3.Final_redhat_3.ep6.el6

Fixes 1 record

TI-2016-07827 CVE-2016-9606 · GHSA-hgjr-xwj3-jfvw

Improper input validation in Red Hat RESTEasy

MEDIUM 44

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0597 Published 2018-03-09 Partial fix · 3.1.2.Final CWE-20