Red Hat Security Advisory

RHSA-2017:3219

jboss-ec2-eap security, bug fix, and enhancement update for EAP 6.4.18

Released 2017-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server jboss-ec2-eap-7.5.18-1.Final_redhat_1.ep6.el6, jboss-ec2-eap-samples-7.5.18-1.Final_redhat_1.ep6.el6

Fixes 1 record

TI-2017-01837 CVE-2017-2582 · GHSA-c77r-6f64-478q

Information disclosure in Red Hat keycloak

LOW 33

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02426 Published 2018-07-26 Partial fix · 2.5.1 CWE-201