CVE-2016-4993

CVE-2016-4993 describes a CRLF injection vulnerability in the Undertow web server used by WildFly 10.0.0 and Red Hat JBoss EAP 7.x prior to 7.0.2. An attacker can inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. The vulnerability affects Undertow/WildFly ...

CVE-2016-5406

The CVE-2016-5406 issue affects Red Hat JBoss Enterprise Application Platform (EAP) 7.x prior to 7.0.2, where the domain controller fails to propagate administrative RBAC configuration to all slave instances. This misconfig leads to privilege escalation potential for remote authenticated users, s...

CVE-2016-3110

Summary: CVE-2016-3110 affects mod_cluster (used in Red Hat JBoss Web Server 2.1). An MCMP message that contains a sequence of = characters after a legitimate element can cause the Apache httpd server to crash, resulting in a denial of service. Affected product/component: mod_cluster within Red H...

CVE-2016-4993

CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform EAP 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

PT-2016-5371 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss Web Server version 2.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an Apache http server crash. This is achieved by sending an MCMP message that contains a series of = equals...

CVE-2016-3110: Improper Input Validation

modcluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service Apache http server crash via an MCMP message containing a series of = equals characters after a legitimate element...

PT-2016-6411

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions prior to 7.0.2 Description The issue concerns the domain controller in Red Hat JBoss Enterprise Application Platform EAP, where remote authenticated users can gain privileges. This is...

PT-2016-6208

Name of the Vulnerable Software and Affected Versions WildFly version 10.0.0 Red Hat JBoss Enterprise Application Platform EAP versions prior to 7.0.2 Description A CRLF injection issue in the Undertow web server allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response...

CVE-2016-5406: Undefined Security Weakness

The domain controller in Red Hat JBoss Enterprise Application Platform EAP 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update

Red Hat JBoss Fuse and A-MQ 6.2.1 Rollup Patch 4, which fixes one security issue and includes several bug fixes, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

RHEL 6 : Virtualization Manager (RHSA-2016:1929)

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: Red Hat Virtualization Manager (RHV) bug fix 3.6.9

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 6 / 7 : JBoss Core Services (RHSA-2016:1851) (httpoxy)

Updated packages are available for Red Hat Enterprise Linux 6 and 7 that provide Red Hat JBoss Core Services Service Pack 1 fixing one security issue. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

Red Hat JBoss Enterprise Application Platform HTTP Header Injection Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. An HTTP header injection vulnerability exists in Red Hat JBoss...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP 2.4.6 Service Pack 1 security update

Updated packages are available for Red Hat Enterprise Linux 6 and 7 that provide Red Hat JBoss Core Services Service Pack 1 fixing one security issue. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 for RHEL 7

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 on RHEL 6

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...

Important: Red Hat Security Advisory: eap7-jboss-ec2-eap security, bug fix, and enhancement update

An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 and Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

CVE-2016-5422

The web console in Red Hat JBoss Operations Network JON before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request...