Red Hat Security AdvisoryRHSA-2025:0371
Red Hat JBoss Enterprise Application Platform 8.0 security update
Released 2025-01-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 8.0 for RHEL 8 eap8-eap-product-conf-parent-800.5.1-1.GA_redhat_00001.1.el8eap, eap8-eap-product-conf-wildfly-ee-feature-pack-800.5.1-1.GA_redhat_00001.1.el8eap, eap8-hornetq-2.4.11-1.Final_redhat_00001.1.el8eap +9
- Red Hat JBoss EAP 8.0 for RHEL 9 eap8-eap-product-conf-parent-800.5.1-1.GA_redhat_00001.1.el9eap, eap8-eap-product-conf-wildfly-ee-feature-pack-800.5.1-1.GA_redhat_00001.1.el9eap, eap8-hornetq-2.4.11-1.Final_redhat_00001.1.el9eap +9
Fixes 1 record
Priority MEDIUM 48
An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00671 · Published 2024-11-04 · Partial fix CWE-22
