Red Hat Security Advisory

RHSA-2019:0137

Red Hat JBoss Enterprise Application Platform 7.2.0 security update

Released 2019-01-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss EAP 7.2 for RHEL 7 Server eap7-1-13.el7eap, eap7-FastInfoset-1.2.13-10.redhat_1.1.el7eap, eap7-activemq-artemis-2.6.3-3.redhat_00014.1.el7eap +47

Fixes 1 record

TI-2017-01837 CVE-2017-2582 · GHSA-c77r-6f64-478q

Information disclosure in Red Hat keycloak

LOW 33

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02426 Published 2018-07-26 Partial fix · 2.5.1 CWE-201