Red Hat Security AdvisoryRHSA-2018:1607
Red Hat JBoss Enterprise Application Platform 5.2 security update
Released 2018-05-17 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server jbossas-5.2.0-24.ep5.el5, jbossas-client-5.2.0-24.ep5.el5, jbossas-messaging-5.2.0-24.ep5.el5 +1
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server jbossas-5.2.0-24.ep5.el6, jbossas-client-5.2.0-24.ep5.el6, jbossas-messaging-5.2.0-24.ep5.el6 +1
Fixes 1 record
Priority CRITICAL 100KEV
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it perfor…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.90713 · Published 2017-10-04 · Fixed CWE-502
