Read the docs
Red Hat Security Advisory

RHSA-2017:1551

Red Hat JBoss Enterprise Application Platform security update

Released 2017-06-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2016-04337 CVE-2016-5018 · GHSA-4v3g-g84w-hv7r

Authentication bypass in Apache Tomcat

Priority MEDIUM 60

In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.10303 Published 2017-08-10 Partial fix · 9.0.0.M10, 8.5.5 +3 CWE-288
TI-2016-05837 CVE-2016-6796 · GHSA-3mjp-p938-4329

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to…

Priority MEDIUM 50

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08321 Published 2017-08-11 Partial fix · 9.0.0.M10, 8.5.5 +3
TI-2017-01848 CVE-2017-2595 · GHSA-94q8-x74c-h24h

Path traversal in [UNKNOWN] wildfly

Priority LOW 39

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.

CVSS 3.0HIGH 7.7 Network Low privileges No interaction EPSS 0.03064 Published 2018-07-27 Partial fix CWE-22