Red Hat Security AdvisoryRHSA-2017:2710
Red Hat JBoss Core Services security update
Released 2017-09-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-httpd-2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-devel-2.4.23-122.jbcs.el6, jbcs-httpd24-httpd-libs-2.4.23-122.jbcs.el6 +12
Fixes 3 records
Priority HIGH 83
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obt…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.94697 · Published 2016-09-01 · Partial fix CWE-200
Priority HIGH 73
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_d…
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.5677 · Published 2017-07-13 · Partial fix CWE-20
Priority LOW 37
The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authenticatio…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.16306 · Published 2015-07-20 · Partial fix CWE-264