Red Hat Security AdvisoryRHSA-2021:0873
Red Hat JBoss Enterprise Application Platform 7.3.6 security update
Released 2021-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.3 for RHEL 7 Server eap7-activemq-artemis-2.9.0-9.redhat_00019.1.el7eap, eap7-activemq-artemis-cli-2.9.0-9.redhat_00019.1.el7eap, eap7-activemq-artemis-commons-2.9.0-9.redhat_00019.1.el7eap +47
Fixes 6 records
Priority MEDIUM 45
An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.07225 · Published 2020-12-18 · Partial fix · 1.67 CWE-670
Priority LOW 29
A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01089 · Published 2021-06-02 · Partial fix · 5.0.20.Final CWE-400
Priority LOW 25
A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP…
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.01231 · Published 2020-09-23 · Partial fix · 2.2.0.Final CWE-444
Priority LOW 24
A flaw was found in Undertow.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.012 · Published 2021-02-23 · Partial fix · 2.1.6, 2.0.34 CWE-444
Priority LOW 21
A flaw was found in wildfly.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00743 · Published 2021-05-13 · Partial fix · 4.0.39 CWE-200
Priority LOW 18
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.F…
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00924 · Published 2020-12-10 · Partial fix · 32.0, 32.0.0-android CWE-378