Red Hat Security AdvisoryRHSA-2018:1609
Red Hat JBoss Enterprise Application Platform security update
Released 2018-05-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server jbossas-5.2.0-23.ep5.el5, jbossas-client-5.2.0-23.ep5.el5, jbossas-messaging-5.2.0-23.ep5.el5 +1
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server jbossas-5.2.0-23.ep5.el6, jbossas-client-5.2.0-23.ep5.el6, jbossas-messaging-5.2.0-23.ep5.el6 +1
Fixes 2 records
Priority LOW 34
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00423 · Published 2018-07-31 · Fixed CWE-264
Priority LOW 34
Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00346 · Published 2018-05-22 · Partial fix CWE-284
