Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:4507
HistoryAug 07, 2023 - 2:59 p.m.

(RHSA-2023:4507) Important: Red Hat JBoss Enterprise Application Platform security update

2023-08-0714:59:21
access.redhat.com
11

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.1%

JSON

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.4.12 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.11 and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.12 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • undertow: OutOfMemoryError due to @MultipartConfig handling (CVE-2023-3223)

  • jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode (CVE-2021-46877)

  • jettison: Uncontrolled Recursion in JSONArray (CVE-2023-1436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9noarcheap7-wildfly< 7.4.12-3.GA_redhat_00003.1.el9eapeap7-wildfly-7.4.12-3.GA_redhat_00003.1.el9eap.noarch.rpm
RedHat9noarcheap7-wildfly-elytron-tool< 1.15.17-1.Final_redhat_00001.1.el9eapeap7-wildfly-elytron-tool-1.15.17-1.Final_redhat_00001.1.el9eap.noarch.rpm
RedHat9noarcheap7-activemq-artemis-hornetq-protocol< 2.16.0-12.redhat_00048.1.el9eapeap7-activemq-artemis-hornetq-protocol-2.16.0-12.redhat_00048.1.el9eap.noarch.rpm
RedHat9noarcheap7-wildfly-java-jdk8< 7.4.12-3.GA_redhat_00003.1.el9eapeap7-wildfly-java-jdk8-7.4.12-3.GA_redhat_00003.1.el9eap.noarch.rpm
RedHat9noarcheap7-jboss-server-migration< 1.10.0-30.Final_redhat_00029.1.el9eapeap7-jboss-server-migration-1.10.0-30.Final_redhat_00029.1.el9eap.noarch.rpm
RedHat9noarcheap7-jboss-server-migration-core< 1.10.0-30.Final_redhat_00029.1.el9eapeap7-jboss-server-migration-core-1.10.0-30.Final_redhat_00029.1.el9eap.noarch.rpm
RedHat9noarcheap7-picketlink-common< 2.5.5-23.SP12_redhat_00013.1.el9eapeap7-picketlink-common-2.5.5-23.SP12_redhat_00013.1.el9eap.noarch.rpm
RedHat9noarcheap7-activemq-artemis-hqclient-protocol< 2.16.0-12.redhat_00048.1.el9eapeap7-activemq-artemis-hqclient-protocol-2.16.0-12.redhat_00048.1.el9eap.noarch.rpm
RedHat9noarcheap7-jettison< 1.5.4-1.redhat_00002.1.el9eapeap7-jettison-1.5.4-1.redhat_00002.1.el9eap.noarch.rpm
RedHat9noarcheap7-picketlink-bindings< 2.5.5-27.SP12_redhat_00016.1.el9eapeap7-picketlink-bindings-2.5.5-27.SP12_redhat_00016.1.el9eap.noarch.rpm
Rows per page:
1-10 of 501

Related

redhat 26
nessus 22
atlassian 5
osv 7
redhatcve 3
ubuntucve 3
veracode 3
cve 3
ibm 24
debiancve 3
prion 3
github 3
openvas 1
amazon 1
ubuntu 1
oracle 4
redhat
redhat
(RHSA-2023:4920) Important: Red Hat Single Sign-On 7.6.5 security update on RHEL 9
2023-08-31 13:21:43
(RHSA-2023:4919) Important: Red Hat Single Sign-On 7.6.5 security update on RHEL 8
2023-08-31 13:21:39
(RHSA-2023:4918) Important: Red Hat Single Sign-On 7.6.5 security update on RHEL 7
2023-08-31 13:21:36
nessus
nessus
RHEL 7 : Red Hat Single Sign-On 7.6.5 security update on RHEL 7 (Important) (RHSA-2023:4918)
2023-08-31 00:00:00
RHEL 9 : Red Hat JBoss Enterprise Application Platform (RHSA-2023:4507)
2023-08-07 00:00:00
RHEL 9 : Red Hat Single Sign-On 7.6.5 security update on RHEL 9 (Important) (RHSA-2023:4920)
2023-08-31 00:00:00
atlassian
atlassian
jackson-databind Vulnerability in Bitbucket Data Center and Server
2023-10-06 17:44:52
DoS (Denial of Service) jackson-databind in Jira Software Data Center and Server
2023-11-12 13:45:20
jackson-databind Vulnerability in Jira Service Management Data Center and Server
2023-10-09 01:44:33
osv
osv
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
2023-03-19 00:30:25
CVE-2021-46877
2023-03-18 22:15:11
Undertow vulnerable to denial of service
2023-09-27 15:30:35
redhatcve
redhatcve
CVE-2021-46877
2023-04-11 04:56:59
CVE-2023-3223
2023-08-07 14:48:58
CVE-2023-1436
2023-03-30 10:13:52
ubuntucve
ubuntucve
CVE-2021-46877
2023-03-18 00:00:00
CVE-2023-1436
2023-03-22 00:00:00
CVE-2023-3223
2023-09-27 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-03-21 02:04:42
Denial Of Service (DoS)
2023-03-25 01:50:32
Denial Of Service (DOS)
2023-10-04 06:21:37
cve
cve
CVE-2021-46877
2023-03-18 22:15:11
CVE-2023-1436
2023-03-22 06:15:09
CVE-2023-3223
2023-09-27 15:18:56
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in FasterXML jackson-databind
2023-05-02 22:13:52
Security Bulletin: A security vulnerability has been identified in FasterXML jackson-databind shipped with IBM Tivoli Netcool Impact (CVE-2021-46877)
2023-06-21 15:15:48
Security Bulletin: Vulnerability in Jettison affects IBM Process Mining . CVE-2023-1436
2023-05-05 21:12:11
debiancve
debiancve
CVE-2021-46877
2023-03-18 22:15:11
CVE-2023-3223
2023-09-27 15:18:56
CVE-2023-1436
2023-03-22 06:15:09
prion
prion
Heap overflow
2023-03-18 22:15:00
Design/Logic Flaw
2023-03-22 06:15:00
Design/Logic Flaw
2023-09-27 15:18:00
github
github
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
2023-03-19 00:30:25
Jettison vulnerable to infinite recursion
2023-03-22 06:30:21
Undertow vulnerable to denial of service
2023-09-27 15:30:35
openvas
openvas
Ubuntu: Security Advisory (USN-6179-1)
2023-06-21 00:00:00
amazon
amazon
Important: jettison
2023-05-25 17:41:00
ubuntu
ubuntu
Jettison vulnerability
2023-06-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.1%

JSON
Related for RHSA-2023:4507
redhat26nessus22atlassian5osv7redhatcve3ubuntucve3veracode3cve3ibm24debiancve3prion3github3openvas1amazon1ubuntu1oracle4