Red Hat Security AdvisoryRHSA-2020:0813
Red Hat JBoss Enterprise Application Platform 7.2 security update
Released 2020-03-12 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.2 for RHEL 6 Server eap7-undertow-2.0.28-4.SP1_redhat_00002.1.el6eap
- Red Hat JBoss EAP 7.2 for RHEL 7 Server eap7-undertow-2.0.28-4.SP1_redhat_00002.1.el7eap
- Red Hat JBoss EAP 7.2 for RHEL 8 eap7-undertow-2.0.28-4.SP1_redhat_00002.1.el8eap
Fixes 1 record
Priority MEDIUM 50
A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04957 · Published 2020-04-28 · Partial fix · 2.0.30 CWE-285
