(RHSA-2018:3528) Moderate: Red Hat JBoss Enterprise Application Platform 7.1.5 on RHEL 7 security update

2018-11-0815:29:11

access.redhat.com

575

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

61.5%

JSON

Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.

This release of Red Hat JBoss Enterprise Application Platform 7.1.5 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.4, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.

Security Fix(es):

wildfly-iiop-openjdk: iiop does not honour strict transport confidentiality (CVE-2018-14627)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarcheap7-ironjacamar-core-api< 1.4.11-1.Final_redhat_00001.1.ep7.el7eap7-ironjacamar-core-api-1.4.11-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-picketlink-wildfly8< 2.5.5-14.SP12_redhat_2.1.ep7.el7eap7-picketlink-wildfly8-2.5.5-14.SP12_redhat_2.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-activemq-artemis-native< 1.5.5.014-1.redhat_00001.1.ep7.el7eap7-activemq-artemis-native-1.5.5.014-1.redhat_00001.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-activemq-artemis-server< 1.5.5.014-1.redhat_00001.1.ep7.el7eap7-activemq-artemis-server-1.5.5.014-1.redhat_00001.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-jboss-server-migration-cli< 1.0.7-1.Final_redhat_00001.1.ep7.el7eap7-jboss-server-migration-cli-1.0.7-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-picketbox-infinispan< 5.0.3-2.Final_redhat_3.1.ep7.el7eap7-picketbox-infinispan-5.0.3-2.Final_redhat_3.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-ironjacamar-jdbc< 1.4.11-1.Final_redhat_00001.1.ep7.el7eap7-ironjacamar-jdbc-1.4.11-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-hibernate-infinispan< 5.1.16-1.Final_redhat_00001.1.ep7.el7eap7-hibernate-infinispan-5.1.16-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-wildfly< 7.1.5-4.GA_redhat_00002.1.ep7.el7eap7-wildfly-7.1.5-4.GA_redhat_00002.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-jbossws-common< 3.1.6-1.Final_redhat_00001.1.ep7.el7eap7-jbossws-common-3.1.6-1.Final_redhat_00001.1.ep7.el7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	eap7-ironjacamar-core-api	< 1.4.11-1.Final_redhat_00001.1.ep7.el7	eap7-ironjacamar-core-api-1.4.11-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-picketlink-wildfly8	< 2.5.5-14.SP12_redhat_2.1.ep7.el7	eap7-picketlink-wildfly8-2.5.5-14.SP12_redhat_2.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-activemq-artemis-native	< 1.5.5.014-1.redhat_00001.1.ep7.el7	eap7-activemq-artemis-native-1.5.5.014-1.redhat_00001.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-activemq-artemis-server	< 1.5.5.014-1.redhat_00001.1.ep7.el7	eap7-activemq-artemis-server-1.5.5.014-1.redhat_00001.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-jboss-server-migration-cli	< 1.0.7-1.Final_redhat_00001.1.ep7.el7	eap7-jboss-server-migration-cli-1.0.7-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-picketbox-infinispan	< 5.0.3-2.Final_redhat_3.1.ep7.el7	eap7-picketbox-infinispan-5.0.3-2.Final_redhat_3.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-ironjacamar-jdbc	< 1.4.11-1.Final_redhat_00001.1.ep7.el7	eap7-ironjacamar-jdbc-1.4.11-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-hibernate-infinispan	< 5.1.16-1.Final_redhat_00001.1.ep7.el7	eap7-hibernate-infinispan-5.1.16-1.Final_redhat_00001.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-wildfly	< 7.1.5-4.GA_redhat_00002.1.ep7.el7	eap7-wildfly-7.1.5-4.GA_redhat_00002.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-jbossws-common	< 3.1.6-1.Final_redhat_00001.1.ep7.el7	eap7-jbossws-common-3.1.6-1.Final_redhat_00001.1.ep7.el7.noarch.rpm