Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:4246
HistoryOct 13, 2020 - 4:39 p.m.

(RHSA-2020:4246) Moderate: Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 7

2020-10-1316:39:17
access.redhat.com
65

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

46.0%

JSON

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.3.3 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.3.2 and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.3.3 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • picketbox: JBoss EAP reload to admin-only mode allows authentication bypass (CVE-2020-14299)

  • wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl (CVE-2020-14338)

  • xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS (CVE-2020-14340)

  • cxf: JMX integration is vulnerable to a MITM attack (CVE-2020-1954)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarcheap7-httpcomponents-client< 4.5.12-1.redhat_00001.1.el7eapeap7-httpcomponents-client-4.5.12-1.redhat_00001.1.el7eap.noarch.rpm
RedHat7noarcheap7-wildfly-transaction-client< 1.1.13-1.Final_redhat_00001.1.el7eapeap7-wildfly-transaction-client-1.1.13-1.Final_redhat_00001.1.el7eap.noarch.rpm
RedHat7noarcheap7-activemq-artemis-ra< 2.9.0-5.redhat_00011.1.el7eapeap7-activemq-artemis-ra-2.9.0-5.redhat_00011.1.el7eap.noarch.rpm
RedHat7noarcheap7-jboss-server-migration-eap6.4< 1.7.2-2.Final_redhat_00002.1.el7eapeap7-jboss-server-migration-eap6.4-1.7.2-2.Final_redhat_00002.1.el7eap.noarch.rpm
RedHat7noarcheap7-jboss-server-migration-wildfly13.0-server< 1.7.2-2.Final_redhat_00002.1.el7eapeap7-jboss-server-migration-wildfly13.0-server-1.7.2-2.Final_redhat_00002.1.el7eap.noarch.rpm
RedHat7noarcheap7-activemq-artemis-hornetq-protocol< 2.9.0-5.redhat_00011.1.el7eapeap7-activemq-artemis-hornetq-protocol-2.9.0-5.redhat_00011.1.el7eap.noarch.rpm
RedHat7noarcheap7-apache-commons-lang< 3.10.0-1.redhat_00001.1.el7eapeap7-apache-commons-lang-3.10.0-1.redhat_00001.1.el7eap.noarch.rpm
RedHat7noarcheap7-xerces-j2< 2.12.0-2.SP03_redhat_00001.1.el7eapeap7-xerces-j2-2.12.0-2.SP03_redhat_00001.1.el7eap.noarch.rpm
RedHat7noarcheap7-jboss-server-migration-core< 1.7.2-2.Final_redhat_00002.1.el7eapeap7-jboss-server-migration-core-1.7.2-2.Final_redhat_00002.1.el7eap.noarch.rpm
RedHat7noarcheap7-picketlink-wildfly8< 2.5.5-25.SP12_redhat_00013.1.el7eapeap7-picketlink-wildfly8-2.5.5-25.SP12_redhat_00013.1.el7eap.noarch.rpm
Rows per page:
1-10 of 951

Related

redhat 11
nessus 5
cve 4
redhatcve 4
prion 4
veracode 4
osv 5
debiancve 1
ubuntucve 1
github 3
ibm 13
oracle 3
redhat
redhat
(RHSA-2020:4245) Moderate: Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 8
2020-10-13 16:38:53
(RHSA-2020:4244) Moderate: Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 6
2020-10-13 16:37:57
(RHSA-2020:4247) Moderate: Red Hat JBoss Enterprise Application Platform 7.3.3 security update
2020-10-13 16:44:32
nessus
nessus
RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 8 (Moderate) (RHSA-2020:4245)
2020-10-14 00:00:00
RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 6 (Moderate) (RHSA-2020:4244)
2020-10-14 00:00:00
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 7 (Moderate) (RHSA-2020:4246)
2023-01-23 00:00:00
cve
cve
CVE-2020-14299
2020-10-16 14:15:00
CVE-2020-14340
2021-06-02 13:15:00
CVE-2020-14338
2020-09-17 15:15:00
redhatcve
redhatcve
CVE-2020-14299
2020-10-13 20:16:26
CVE-2020-14340
2020-07-24 04:37:40
CVE-2020-1954
2020-04-15 19:03:32
prion
prion
Authentication flaw
2020-10-16 14:15:00
Design/Logic Flaw
2021-06-02 13:15:00
Default configuration
2020-04-01 21:15:00
veracode
veracode
Authentication Bypass
2020-10-14 04:33:01
Validation Bypass
2020-10-14 04:33:05
Denial Of Service (DoS)
2020-10-14 04:33:10
osv
osv
Uncontrolled Resource Consumption in XNIO
2021-06-08 22:29:29
CVE-2020-14340
2021-06-02 13:15:08
Apache CXF JMX Integration is vulnerable to a MITM attack
2022-02-10 22:38:50
debiancve
debiancve
CVE-2020-14340
2021-06-02 13:15:00
ubuntucve
ubuntucve
CVE-2020-14340
2021-06-02 00:00:00
github
github
Uncontrolled Resource Consumption in XNIO
2021-06-08 22:29:29
Apache CXF JMX Integration is vulnerable to a MITM attack
2022-02-10 22:38:50
Improper Input Validation in Xerces
2022-02-15 01:37:41
ibm
ibm
Security Bulletin: Apache CXF vulnerability identified in IBM Tivoli Application Dependency Discovery Manager (CVE-2020-1954)
2020-10-22 12:36:13
Security Bulletin: A security vulnerability has been identified in Apache CXF, which is shipped with IBM Tivoli Network Manager (CVE-2020-1954).
2020-07-30 09:47:57
Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-1954
2022-08-30 16:50:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

46.0%

JSON
Related for RHSA-2020:4246
redhat11nessus5cve4redhatcve4prion4veracode4osv5debiancve1ubuntucve1github3ibm13oracle3