Red Hat Security AdvisoryRHSA-2019:4021
Red Hat JBoss Enterprise Application Platform 7.2.5 security update
Released 2019-11-26 · Red Hat rating Important · View on Red Hat →
Fixes 6 records
Priority HIGH 75
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.87286 · Published 2019-08-13 · Partial fix CWE-400
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.82813 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.83433 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority HIGH 67
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.59547 · Published 2019-08-13 · Partial fix CWE-400
Priority MEDIUM 40
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0119 · Published 2020-01-07 · Fixed CWE-592
Priority LOW 25
A flaw was found in wildfly-core before 7.2.5.GA.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01141 · Published 2019-10-14 · Partial fix · 7.2.5.GA CWE-284
THREATIST.IORead the docs