Red Hat Security Advisory

RHSA-2020:3017

Red Hat support for Spring Boot 2.1.15 security and bug fix update

Released 2020-07-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Runtimes Spring Boot 2.1.15

Fixes 2 records

TI-2020-07593 CVE-2020-9484 · GHSA-344f-f5vg-2jfj

Deserialization of untrusted data in Apache Tomcat

HIGH 66

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.5552 Published 2020-05-20 Partial fix · 10.0.0-M5, 9.0.35 +2 CWE-502

TI-2020-01659 CVE-2020-1714 · GHSA-m6mm-q862-j366

Improper input validation in Red Hat keycloak

MEDIUM 43

A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02604 Published 2020-05-13 Partial fix · 11.0.0 CWE-20