Read the docs
Red Hat Security Advisory

RHSA-2020:0961

Red Hat JBoss Enterprise Application Platform 7.3 security update

Released 2020-03-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2020-01688 CVE-2020-1745 · GHSA-gv2w-88hx-8m9r

Improper authorization in undertow-io undertow

Priority MEDIUM 50

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04957 Published 2020-04-28 Partial fix · 2.0.30 CWE-285
TI-2019-00181 CVE-2019-0205 · GHSA-rj7p-rfgp-852x

Infinite loop in Apache Thrift

Priority MEDIUM 45

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09156 Published 2019-10-28 Partial fix · 0.13.0 CWE-835
TI-2019-00183 CVE-2019-0210 · GHSA-jq7p-26h5-w78r

Out-of-bounds read in Apache Thrift

Priority MEDIUM 42

In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06531 Published 2019-10-28 Partial fix · 0.13.0 CWE-125