Red Hat Security AdvisoryRHSA-2024:1677
Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
Released 2024-04-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.4.16 io.undertow.undertow-core-2.2.30.SP1-redhat-00001.jar, org.apache.sshd.sshd-common-2.12.1.redhat-00001.jar, org.jberet.jberet-core-1.3.9.SP3-redhat-00001.jar
Fixes 5 records
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 41
A flaw was found in Undertow package.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01284 · Published 2024-11-07 · Fixed in 2.2.30-1.SP1_redhat_00001.1.el8eap, 2.2.30-1.SP1_redhat_00001.1.el9eap +5 CWE-20
Priority MEDIUM 40
A vulnerability was found in Undertow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04572 · Published 2024-02-19 · Partial fix · 1.5.5.016-1.redhat_00001.1.ep7.el7, 1:1.5.5.016-1.redhat_00001.1.ep7.el7 +24 CWE-400
Priority LOW 37
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.01093 · Published 2024-11-17 · Partial fix · 1.2-23, 1.2-15 +9 CWE-444
Priority LOW 30
A vulnerability was found in jberet-core logging.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00808 · Published 2024-04-25 · Partial fix · 2.2.1, 1.3.9.SP3-redhat-00001 +5 CWE-523
