TI-2020-01878 CVE-2020-1954 · GHSA-ffm7-7r8g-77xm
Information disclosure in Apache CXF
Priority LOW 33
Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus.
RHSA-2020:4246
Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 7
Released 2020-10-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.3 for RHEL 7 Server eap7-activemq-artemis-2.9.0-5.redhat_00011.1.el7eap, eap7-activemq-artemis-cli-2.9.0-5.redhat_00011.1.el7eap, eap7-activemq-artemis-commons-2.9.0-5.redhat_00011.1.el7eap +47
Fixes 4 records
TI-2020-11170 CVE-2020-14299 · GHSA-vx2g-h7fh-g3vj
Improper authentication in picketbox
Priority LOW 32
A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to admin-only mode.
TI-2020-11211 CVE-2020-14340 · GHSA-c738-77x8-wmq5
Uncontrolled resource consumption in XNIO
Priority LOW 31
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles.
TI-2020-11209 CVE-2020-14338 · GHSA-w4jq-qh47-hvjq
Improper input validation in Wildfly
Priority LOW 27
A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature.