Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:5928
HistoryAug 08, 2022 - 7:39 p.m.

(RHSA-2022:5928) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update

2022-08-0819:39:55
access.redhat.com
62
red hat jboss
java applications
wildfly application runtime
security update
cve-2022-25647
cve-2021-44906
cve-2022-24823
unix

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.035

Percentile

91.7%

JSON

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.6 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.5, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.6 Release Notes for information about the most significant bug fixes and enhancements included in this release.
Security Fix(es):

  • com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson (CVE-2022-25647)

  • org.jboss.hal-hal-parent: minimist: prototype pollution (CVE-2021-44906)

  • netty: world readable temporary file containing sensitive data (CVE-2022-24823)

Related

nessus 48
redhat 15
prion 3
ubuntucve 3
ibm 36
redos 1
debiancve 3
cvelist 3
cve 3
openvas 18
mageia 2
osv 19
nvd 3
github 3
cgr 2
veracode 3
redhatcve 3
alpinelinux 1
atlassian 4
suse 5
ubuntu 1
broadcom 2
wolfi 1
debian 3
f5 1
thn 1
githubexploit 1
rocky 3
oraclelinux 3
almalinux 3
hivepro 1
freebsd 1
nessus
nessus
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.6 Security update (Moderate) (RHSA-2022:5892)
2022-08-04 00:00:00
RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.6 Security update. (Moderate) (RHSA-2022:5894)
2022-08-08 00:00:00
RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.6 Security update (Moderate) (RHSA-2022:5893)
2022-08-04 00:00:00
redhat
redhat
(RHSA-2022:5892) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update
2022-08-03 15:36:19
(RHSA-2022:5894) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update.
2022-08-03 15:37:48
(RHSA-2022:5893) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update
2022-08-03 15:36:29
prion
prion
Code injection
2022-03-17 16:15:00
Deserialization of untrusted data
2022-05-01 16:15:00
Information disclosure
2022-05-06 12:15:00
ubuntucve
ubuntucve
CVE-2021-44906
2022-03-17 00:00:00
CVE-2022-25647
2022-05-01 00:00:00
CVE-2022-24823
2022-05-06 00:00:00
ibm
ibm
Security Bulletin: IBM Cognos Analytics has addressed a vulnerability (CVE-2021-44906)
2023-07-27 21:13:11
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Netty information disclosure (CVE-2022-24823)
2022-08-30 18:16:54
Security Bulletin: There is a vulnerability in Netty used by IBM Maximo Asset Management ( CVE-2022-24823)
2023-09-07 17:06:38
redos
redos
ROS-20240507-05
2024-05-07 00:00:00
debiancve
debiancve
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-25647
2022-05-01 16:15:08
CVE-2022-24823
2022-05-06 12:15:08
cvelist
cvelist
CVE-2021-44906
2022-03-17 13:05:57
CVE-2022-25647 Deserialization of Untrusted Data
2022-05-01 00:00:00
CVE-2022-24823 Local Information Disclosure Vulnerability in io.netty:netty-codec-http
2022-05-06 12:05:11
cve
cve
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-25647
2022-05-01 16:15:08
CVE-2022-24823
2022-05-06 12:15:08
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0035)
2023-03-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2044-1)
2022-06-13 00:00:00
Ubuntu: Security Advisory (USN-6692-1)
2024-03-13 00:00:00
mageia
mageia
Updated nodejs-minimist packages fix security vulnerability
2023-02-07 03:06:39
Updated google-gson packages fix security vulnerability
2022-09-21 21:15:27
osv
osv
Prototype Pollution in minimist
2022-03-18 00:01:09
CGA-m5h3-2wph-f949
2024-06-06 12:26:09
CVE-2022-25647
2022-05-01 16:15:08
nvd
nvd
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-25647
2022-05-01 16:15:08
CVE-2022-24823
2022-05-06 12:15:08
github
github
Prototype Pollution in minimist
2022-03-18 00:01:09
Deserialization of Untrusted Data in Gson
2022-05-03 00:00:44
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
2022-05-10 08:46:50
cgr
cgr
CVE-2022-24823 vulnerabilities
2024-05-19 03:07:16
CVE-2022-25647 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Prototype Pollution
2022-03-18 02:42:04
Denial Of Service (DoS)
2022-05-04 14:43:44
Information Disclosure
2022-05-09 05:01:24
redhatcve
redhatcve
CVE-2022-25647
2022-05-02 07:38:06
CVE-2021-44906
2022-03-19 23:40:42
CVE-2022-24823
2022-05-17 15:01:10
alpinelinux
alpinelinux
CVE-2022-25647
2022-05-01 16:15:08
atlassian
atlassian
DoS (Denial of Service) com.google.code.gson:gson in Jira Software Data Center and Server
2023-11-12 13:45:35
DoS (Denial of Service) com.google.code.gson:gson Dependency in Crucible Data Center and Server
2024-05-21 10:14:25
com.google.code.gson Vulnerability in Bitbucket Data Center and Server
2023-10-04 19:45:55
suse
suse
Security update for google-gson (important)
2022-06-10 00:00:00
Security update for nodejs8 (moderate)
2022-05-17 00:00:00
Security update for nodejs12 (important)
2022-04-28 00:00:00
ubuntu
ubuntu
Gson vulnerability
2024-03-12 00:00:00
broadcom
broadcom
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization
2023-08-29 00:00:00
Oracle Java SE Multiple Vulnerabilities (July 2022 CPU update) CVE-2022-21540 CVE-2022-21541 CVE-2022-21549 CVE-2022-25647 CVE-2022-34169
2023-08-29 00:00:00
wolfi
wolfi
CVE-2022-25647 vulnerabilities
2024-09-08 09:13:33
debian
debian
[SECURITY] [DSA 5227-1] libgoogle-gson-java security update
2022-09-07 10:22:18
[SECURITY] [DLA 3001-1] libgoogle-gson-java security update
2022-05-13 21:45:43
[SECURITY] [DLA 3100-1] libgoogle-gson-java security update
2022-09-07 09:14:24
f5
f5
K00994461: GSON vulnerability CVE-2022-25647
2022-08-29 00:00:00
thn
thn
Solving the indirect vulnerability enigma - fixing indirect vulnerabilities without breaking your dependency tree
2022-07-01 09:45:00
githubexploit
githubexploit
Exploit for Prototype Pollution in Substack Minimist
2023-10-02 15:20:35
rocky
rocky
nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 14:30:11
nodejs:14 security, bug fix, and enhancement update
2023-01-09 14:24:14
nodejs:16 security, bug fix, and enhancement update
2022-12-15 15:42:25
oraclelinux
oraclelinux
nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-24 00:00:00
nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
nodejs:16 security, bug fix, and enhancement update
2022-12-16 00:00:00
almalinux
almalinux
Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 00:00:00
Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
Moderate: nodejs:16 security, bug fix, and enhancement update
2022-12-15 00:00:00
hivepro
hivepro
Critical Security Vulnerabilities Discovered in Atlassian Products
2023-09-27 10:22:43
freebsd
freebsd
cassandra3 -- multiple vulnerabilities
2023-01-11 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.035

Percentile

91.7%

JSON
Related for RHSA-2022:5928
nessus48redhat15prion3ubuntucve3ibm36redos1debiancve3cvelist3cve3openvas18mageia2osv19nvd3github3cgr2veracode3redhatcve3alpinelinux1atlassian4suse5ubuntu1broadcom2wolfi1debian3f51thn1githubexploit1rocky3oraclelinux3almalinux3hivepro1freebsd1