Red Hat Security AdvisoryRHSA-2018:2143
Red Hat Decision Manager 7.0.1 bug fix and security update
Released 2018-07-05 · Red Hat rating Important · View on Red Hat →
Fixes 2 records
Priority MEDIUM 58
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.14703 · Published 2018-03-20 · Partial fix · 1.7.26, 1.8.0-beta4 CWE-284
Priority MEDIUM 41
RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05601 · Published 2016-09-07 · Partial fix · 3.0.20.Final
