Red Hat Security Advisory

RHSA-2020:5342

Red Hat JBoss Enterprise Application Platform 7.3.4 security update

Released 2020-12-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss EAP 7.3 for BaseOS-8 eap7-activemq-artemis-2.9.0-6.redhat_00016.1.el8eap, eap7-activemq-artemis-cli-2.9.0-6.redhat_00016.1.el8eap, eap7-activemq-artemis-commons-2.9.0-6.redhat_00016.1.el8eap +47

TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq

MEDIUM 56

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.17714 Published 2020-12-03 Partial fix · 2.6.7.4, 2.9.10.7 +1 CWE-611

TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h

MEDIUM 40

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02929 Published 2020-12-02 Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89

TI-2020-15661 CVE-2020-25644 · GHSA-hxj4-885f-grgp

LOW 37

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02365 Published 2020-10-06 Partial fix · 1.1.3.Final CWE-401