Red Hat Security Advisory

RHSA-2017:3217

Red Hat JBoss Enterprise Application Platform 6.4.18 security update

Released 2017-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server hornetq-2.3.25-24.SP22_redhat_1.1.ep6.el6, jboss-as-appclient-7.5.18-1.Final_redhat_1.1.ep6.el6, jboss-as-cli-7.5.18-1.Final_redhat_1.1.ep6.el6 +47

Fixes 1 record

TI-2017-01837 CVE-2017-2582 · GHSA-c77r-6f64-478q

Information disclosure in Red Hat keycloak

LOW 33

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02426 Published 2018-07-26 Partial fix · 2.5.1 CWE-201