Red Hat Security Advisory

RHSA-2020:0812

Red Hat JBoss Enterprise Application Platform 7.2 security update

Released 2020-03-12 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat JBoss EAP 7.2

Fixes 1 record

TI-2020-01688 CVE-2020-1745 · GHSA-gv2w-88hx-8m9r

Improper authorization in undertow-io undertow

MEDIUM 50

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04957 Published 2020-04-28 Partial fix · 2.0.30 CWE-285