Red Hat Security AdvisoryRHSA-2018:1249
jboss-ec2-eap package for EAP 7.1.2
Released 2018-04-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server eap7-jboss-ec2-eap-7.1.2-1.GA_redhat_1.ep7.el6, eap7-jboss-ec2-eap-samples-7.1.2-1.GA_redhat_1.ep7.el6
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server eap7-jboss-ec2-eap-7.1.2-1.GA_redhat_1.ep7.el7, eap7-jboss-ec2-eap-samples-7.1.2-1.GA_redhat_1.ep7.el7
Fixes 3 records
Priority MEDIUM 58
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.14703 · Published 2018-03-20 · Partial fix · 1.7.26, 1.8.0-beta4 CWE-284
Priority LOW 31
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, du…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01785 · Published 2018-05-21 · Partial fix · 7.1.2.GA CWE-113
Priority LOW 25
A flaw was found in Wildfly 9.x.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00509 · Published 2018-01-24 · Partial fix · 12.0.0 CWE-20
