Red Hat Security Advisory

RHSA-2024:11529

Red Hat JBoss Enterprise Application Platform 7.4 security update

Released 2024-12-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el7eap, eap7-hornetq-commons-2.4.11-1.Final_redhat_00001.1.el7eap, eap7-hornetq-core-client-2.4.11-1.Final_redhat_00001.1.el7eap +1
Red Hat JBoss EAP 7.4 for RHEL 8 eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el8eap, eap7-hornetq-commons-2.4.11-1.Final_redhat_00001.1.el8eap, eap7-hornetq-core-client-2.4.11-1.Final_redhat_00001.1.el8eap +1
Red Hat JBoss EAP 7.4 for RHEL 9 eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el9eap, eap7-hornetq-commons-2.4.11-1.Final_redhat_00001.1.el9eap, eap7-hornetq-core-client-2.4.11-1.Final_redhat_00001.1.el9eap +1

TI-2024-34252 CVE-2024-51127 · GHSA-r7mv-mv7m-pjw3

MEDIUM 48

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00671 Published 2024-11-04 Partial fix CWE-22