Red Hat Security AdvisoryRHSA-2017:1834
Red Hat JBoss Enterprise Application Platform 7.0.7 on RHEL 6
Released 2017-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 Server eap7-activemq-artemis-1.1.0-18.SP21_redhat_1.1.ep7.el6, eap7-activemq-artemis-cli-1.1.0-18.SP21_redhat_1.1.ep7.el6, eap7-activemq-artemis-commons-1.1.0-18.SP21_redhat_1.1.ep7.el6 +47
Fixes 2 records
Priority HIGH 75
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to t…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.37721 · Published 2018-02-06 · Partial fix · 2.6.7.1, 2.7.9.1 +1 CWE-184
Priority MEDIUM 41
The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.06879 · Published 2016-09-27 · Partial fix · 1.4.0 CWE-502
