Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.2 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.2 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.2 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 8.0.2 Security update (Moderate) (RHSA-2024:3581)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3581 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.0.2 Security update (Moderate) (RHSA-2024:3580)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3580 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release o...

io.quarkiverse.jberet:quarkus-jberet (>=0.0.1 <=2.3.0), io.quarkiverse.jberet:quarkus-jberet-deployment (>=0.0.1 <=2.3.0) +74 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (>=1.0.0.Alpha3 <=2.2.0.Final)

org.jberet:jberet-core MAVEN version =1.0.0.Alpha3, =0.0.1, =0.0.1, =2.0.0, =2.0.0, =0.0.2, =0.0.2, =6.0.0.CR1, =6.1.0.Beta1, =6.1.0.CR1, =7.0.0.CR1, =5.9.0.Beta1, =1.3.0.Beta3, =1.3.0.Final - org.jberet.samples:restReader =1.3.9.SP3 and more Source cves: CVE-2024-1102 Source advisory:...

CVE-2024-1102 Jberet: jberet-core logging database credentials

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection...

CVE-2024-1102

CVE-2024-1102 affects Red Hat JBoss EAP 8.x via the jberet-core logging component. An exception in the dbProperties handling could disclose database credentials (username/password) in logs, impacting confidentiality. The CVE is referenced in Red Hat advisories RHSA-2024:3580/3581 and linked RHSA ...

CVE-2024-1102

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat...