Red Hat Security AdvisoryRHSA-2024:1674
Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
Released 2024-04-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-activemq-artemis-2.16.0-18.redhat_00052.1.el7eap, eap7-activemq-artemis-cli-2.16.0-18.redhat_00052.1.el7eap, eap7-activemq-artemis-commons-2.16.0-18.redhat_00052.1.el7eap +47
Fixes 5 records
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 41
A flaw was found in Undertow package.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01284 · Published 2024-11-07 · Fixed in 2.2.30-1.SP1_redhat_00001.1.el8eap, 2.2.30-1.SP1_redhat_00001.1.el9eap +5 CWE-20
Priority MEDIUM 40
A vulnerability was found in Undertow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04572 · Published 2024-02-19 · Partial fix · 1.5.5.016-1.redhat_00001.1.ep7.el7, 1:1.5.5.016-1.redhat_00001.1.ep7.el7 +24 CWE-400
Priority LOW 37
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.01093 · Published 2024-11-17 · Partial fix · 1.2-23, 1.2-15 +9 CWE-444
Priority LOW 27
A path traversal vulnerability was found in Undertow.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01714 · Published 2024-02-12 · Partial fix · 2.3.12, 2.16.0-18.redhat_00052.1.el8eap +57 CWE-24
