Red Hat Security Advisory

RHSA-2022:0404

Red Hat JBoss Enterprise Application Platform 7.4.3 security update

Released 2022-02-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform io.undertow.undertow-core-2.2.13.SP2-redhat-00001.jar, org.hornetq.hornetq-jms-client-2.4.8.Final-redhat-00001.jar

TI-2021-02790 CVE-2021-3859 · GHSA-339q-62wm-c39w

LOW 36

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01736 Published 2022-08-26 Partial fix · 2.2.15 CWE-214

TI-2021-03607 CVE-2021-20318 · GHSA-36vx-8x4w-9h2m

LOW 35

The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01757 Published 2021-12-23 Fixed CWE-502