Red Hat Security Advisory

RHSA-2025:3990

Red Hat JBoss Enterprise Application Platform 8.0.7 security update

Released 2025-04-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss EAP 8.0 for RHEL 9 eap8-apache-commons-io-2.16.1-1.redhat_00001.1.el9eap, eap8-bouncycastle-1.80.0-1.redhat_00001.1.el9eap, eap8-bouncycastle-jmail-1.80.0-1.redhat_00001.1.el9eap +36

Fixes 2 records

TI-2025-17142 CVE-2025-23367 · GHSA-qr6x-62gq-4ccp

Org.wildfly.core:wildfly-server: wildfly improper rbac permission

LOW 30

A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00769 Published 2025-01-30 Partial fix · 27.0.1.Final, 28.0.0.Beta2 +32 CWE-284

TI-2024-11475 CVE-2024-12369 · GHSA-5565-3c98-g6jc

Elytron-oidc-client: oidc authorization code injection

LOW 19

A vulnerability was found in OIDC-Client.

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00245 Published 2024-12-09 Partial fix · 2.16.1-1.redhat_00001.1.el8eap, 1.80.0-1.redhat_00001.1.el8eap +12 CWE-345