Red Hat Security AdvisoryRHSA-2020:2113
Red Hat Single Sign-On 7.3.8 security update
Released 2020-05-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Single Sign On 7.3
Fixes 3 records
Priority MEDIUM 44
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03089 · Published 2019-11-25 · Partial fix · 8.2.12.Final, 9.4.17.Final CWE-470
Priority MEDIUM 41
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.10124 · Published 2021-06-02 · Partial fix · 2.3.14 CWE-22
Priority MEDIUM 40
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04425 · Published 2018-07-18 · Partial fix · 2.3.7 CWE-22
