Red Hat Security AdvisoryRHSA-2024:1194
Red Hat JBoss Enterprise Application Platform 8.0.1 security update
Released 2024-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixes 6 records
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 44
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02194 · Published 2023-09-12 · Partial fix · 5.13.3.202401111512-r, 6.6.1.202309021850-r +1 CWE-178
Priority MEDIUM 42
A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01702 · Published 2024-06-20 · Partial fix · 2.2.33.Final, 2.3.14 +1 CWE-488
Priority LOW 35
In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0089 · Published 2023-11-03 · Partial fix · 1.0.5, 1.1.4 CWE-20
Priority LOW 27
Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00581 · Published 2024-08-12 · Partial fix · 2.12.0 CWE-354
Priority LOW 25
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.01311 · Published 2023-07-10 · Partial fix · 2.10, 2.9.3 +1 CWE-22