Red Hat Security AdvisoryRHSA-2018:2664
Red Hat JBoss Enterprise Application Platform 5.2 security update
Released 2018-09-10 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server richfaces-3.3.1-7.SP3_patch_02.ep5.el5, richfaces-cdk-3.3.1-7.SP3_patch_02.ep5.el5, richfaces-demo-3.3.1-7.SP3_patch_02.ep5.el5 +4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server richfaces-3.3.1-4.SP3_patch_02.ep5.el6_10, richfaces-demo-3.3.1-4.SP3_patch_02.ep5.el6_10, richfaces-framework-3.3.1-4.SP3_patch_02.ep5.el6_10 +2
Fixes 1 record
Priority MEDIUM 60
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18681 · Published 2018-06-18 · Partial fix CWE-917
