Red Hat Security Advisory

RHSA-2020:2781

Red Hat JBoss Enterprise Application Platform 6.4.23 security update

Released 2020-07-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server glassfish-jsf12-eap6-1.2.15-11.b01_SP2_redhat_2.1.ep6.el5, hornetq-2.3.25-29.SP31_redhat_00001.1.ep6.el5, ironjacamar-common-api-eap6-1.0.44-1.Final_redhat_00001.1.ep6.el5 +47

TI-2020-01862 CVE-2020-1938 · GHSA-c9hw-wf7x-jp9j

CRITICAL 100KEV

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9927 Published 2020-02-24 Partial fix · 9.0.31, 8.5.51 +1 CWE-269

TI-2019-11089 CVE-2019-14885 · GHSA-cxpp-v3rm-fq33

LOW 21

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00742 Published 2020-01-23 Fixed in 7.2.6.GA CWE-532