THREATIST.IORead the docs Red Hat JBoss Enterprise Application Platform 7.4.25 security update
Released 2026-09-15 · Red Hat rating Important · View on Red Hat →
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session.
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake.
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service.
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.