RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 (RHSA-2024:5856)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5856 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

io.apiman:apiman-gateway-platforms-undertow (>=1.1.0.rc3, <=1.2.1.final), io.undertow.jastow:jastow (>=1.0.1.final, <=1.0.3.final) +3 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.0.1.final)

io.undertow:undertow-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.apiman:apiman-gateway-platforms-undertow =1.1.0.rc3, =1.0.1.final, =3.0.7.final, =3.0.12.final Sourc...

com.clianz:spur-framework (0.0.3), com.zarbosoft:cogettus (0.0.2) +21 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.4.7.final)

io.undertow:undertow-core MAVEN version 1.4.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.clianz:spur-framework 0.0.3 - com.zarbosoft:cogettus 0.0.2 - com.zarbosoft:gettus 0.0.2 -...

io.jboot:jboot (>=1.0-alpha5, <=1.0-beta4), io.joshworks.extensions:admin (>=0.3.0, <=0.5.1) +64 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.4.16.final)

io.undertow:undertow-core MAVEN version 1.4.16.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.jboot:jboot =1.0-alpha5, =0.3.0, =0.3.0, =0.3.0, =0.3, =0.1, =2.1.0-alpha21, =2.1.0-alpha21,...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

io.undertow:undertow-servlet (1.0.0.alpha21), io.undertow:undertow-websockets-jsr (1.0.0.alpha21) +26 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.0.0.alpha21)

io.undertow:undertow-core MAVEN version 1.0.0.alpha21 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha21 - io.undertow:undertow-websockets-jsr 1.0.0.alpha21 -...

io.undertow:undertow-servlet (1.0.0.alpha2), io.undertow:undertow-websockets-jsr (1.0.0.alpha2) potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.0.0.alpha2)

io.undertow:undertow-core MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha2 - io.undertow:undertow-websockets-jsr 1.0.0.alpha2 Source...

io.undertow:undertow-servlet (1.0.0.alpha3), io.undertow:undertow-websockets-jsr (1.0.0.alpha3) potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.0.0.alpha3)

io.undertow:undertow-core MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha3 - io.undertow:undertow-websockets-jsr 1.0.0.alpha3 Source...

de.svenkubiak:mangooio-mongodb-extension (2.0.1), io.mangoo:mangooio-benchmark (2.2.0) +26 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.3.12.final)

io.undertow:undertow-core MAVEN version 1.3.12.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.svenkubiak:mangooio-mongodb-extension 2.0.1 - io.mangoo:mangooio-benchmark 2.2.0 -...

com.gitblit.fathom:fathom-core (0.7.0), com.gitblit.fathom:fathom-eventbus (0.7.0) +50 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.3.5.final)

io.undertow:undertow-core MAVEN version 1.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.gitblit.fathom:fathom-core 0.7.0 - com.gitblit.fathom:fathom-eventbus 0.7.0 -...

com.sksamuel.scruffy:scruffy-integrationtest_2.11 (1.12.0), com.sksamuel.scruffy:scruffy-undertow_2.11 (>=1.9.0, <=1.12.0) +39 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.2.0.beta10)

io.undertow:undertow-core MAVEN version 1.2.0.beta10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.sksamuel.scruffy:scruffy-integrationtest2.11 1.12.0 - com.sksamuel.scruffy:scruffy-undertow2.11...

com.adobe.api.platform:launchpad (>=1.1.11, <=1.3.7), com.adobe.api.platform:launchpad-test-support (>=1.1.11, <=1.3.7) +21 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.1.0.final)

io.undertow:undertow-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.adobe.api.platform:launchpad =1.1.11, =1.1.11, =0.9.0.final, =0.9.0.final, =0.9.0.final,...

io.undertow:undertow-http2-test-suite (1.2.0.beta7), io.undertow:undertow-servlet (1.2.0.beta7) +1 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.2.0.beta7)

io.undertow:undertow-core MAVEN version 1.2.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta7 - io.undertow:undertow-servlet 1.2.0.beta7 -...

com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +63 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.1.2.final)

io.undertow:undertow-core MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta3), io.undertow:undertow-servlet (1.3.0.beta3) +32 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.3.0.beta3)

io.undertow:undertow-core MAVEN version 1.3.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta3 - io.undertow:undertow-servlet 1.3.0.beta3 -...

co.paralleluniverse:comsat-test-utils (0.3.0), com.adobe.api.platform:micro-service-container-parent (>=1.1.16, <=1.2.1) +28 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.1.1.final)

io.undertow:undertow-core MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-test-utils 0.3.0 - com.adobe.api.platform:micro-service-container-parent...

com.github.avarabyeu.jashing.extensions:jashing-cvs (>=0.0.12, <=0.0.16), com.github.avarabyeu.jashing.extensions:jashing-git (>=0.0.12, <=0.0.16) +36 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.4.6.final)

io.undertow:undertow-core MAVEN version 1.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.avarabyeu.jashing.extensions:jashing-cvs =0.0.12, =0.0.12, =0.0.12, =0.0.12, =0.0.12, =0.4.3...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

com.github.zurekp:slb (>=0.0.1, <=0.0.4), io.undertow:undertow-http2-test-suite (1.2.0.beta6) +3 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.2.0.beta6)

io.undertow:undertow-core MAVEN version 1.2.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.zurekp:slb =0.0.1, =1.0.0.alpha14, =1.0.0.alpha15 Source cves: CVE-2020-1757 Source advisory...

io.undertow:undertow-servlet (1.1.5.final), io.undertow:undertow-websockets-jsr (1.1.5.final) potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.1.5.final)

io.undertow:undertow-core MAVEN version 1.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.5.final - io.undertow:undertow-websockets-jsr 1.1.5.final Source cves:...