Red Hat Security AdvisoryRHSA-2018:2938
Red Hat OpenShift Application Runtimes Thorntail 2.2.0 security & bug fix update
Released 2018-10-17 · Red Hat rating Moderate · View on Red Hat →
Fixes 2 records
Priority HIGH 67
FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.19781 · Published 2018-02-26 · Partial fix · 2.8.11.1, 2.9.5 +2 CWE-184
Priority LOW 25
A flaw was found in Wildfly 9.x.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00509 · Published 2018-01-24 · Partial fix · 12.0.0 CWE-20
