Red Hat Security AdvisoryRHSA-2018:2276
Red Hat JBoss Enterprise Application Platform 7.1 security update
Released 2018-07-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server eap7-apache-cxf-3.1.16-1.redhat_1.1.ep7.el6, eap7-apache-cxf-rt-3.1.16-1.redhat_1.1.ep7.el6, eap7-apache-cxf-services-3.1.16-1.redhat_1.1.ep7.el6 +11
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server eap7-apache-cxf-3.1.16-1.redhat_1.1.ep7.el7, eap7-apache-cxf-rt-3.1.16-1.redhat_1.1.ep7.el7, eap7-apache-cxf-services-3.1.16-1.redhat_1.1.ep7.el7 +11
Fixes 2 records
Priority MEDIUM 46
It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.08507 · Published 2018-07-02 · Partial fix · 3.1.16, 3.2.5 CWE-755
Priority LOW 27
WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01262 · Published 2018-07-27 · Partial fix · 6.0.0.Alpha3 CWE-22
