Red Hat Security Advisory

RHSA-2017:1675

Red Hat JBoss BPM Suite security update

Released 2017-07-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss BPMS 6.4

Fixes 3 records

TI-2017-03849 CVE-2017-5929 · GHSA-vmfg-rjjm-rjrj

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer…

MEDIUM 52

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07501 Published 2017-03-13 Partial fix · 1.2.0 CWE-502

TI-2016-07827 CVE-2016-9606 · GHSA-hgjr-xwj3-jfvw

Improper input validation in Red Hat RESTEasy

MEDIUM 44

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0597 Published 2018-03-09 Partial fix · 3.1.2.Final CWE-20

TI-2016-05434 CVE-2016-6346 · GHSA-wxvr-vqfp-9cqw

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

MEDIUM 41

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05601 Published 2016-09-07 Partial fix · 3.0.20.Final