Lucene search
This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.REDHAT-RHSA-2015-0847.NASLHistoryApr 20, 2015 - 12:00 a.m.
RHEL 6 : JBoss EAP (RHSA-2015:0847)
2015-04-2000:00:00
This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.007 Low
EPSS
Percentile
80.4%
Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.0, and fix multiple security issues, several bugs, and add various enhancements, are now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.
It was found that a prior countermeasure in Apache WSS4J for Bleichenbacherâs attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key. (CVE-2015-0226)
It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request. (CVE-2015-0227)
It was discovered that a JkUnmount rule for a subtree of a previous JkMount rule could be ignored. This could allow a remote attacker to potentially access a private artifact in a tree that would otherwise not be accessible to them. (CVE-2014-8111)
A flaw was found in the way PicketLinkâs Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victimâs account via PicketLink. (CVE-2015-0277)
It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the userâs home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not accessible to them. (CVE-2014-3586)
The CVE-2015-0277 issue was discovered by Ondrej Kotek of Red Hat.
This release of JBoss Enterprise Application Platform also includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.4.0 Release Notes, linked to in the References.
All users who require JBoss Enterprise Application Platform 6.4.0 on Red Hat Enterprise Linux 6 should install these new packages. The JBoss server process must be restarted for the update to take effect.
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2015:0847. The text
# itself is copyright (C) Red Hat, Inc.
#
include("compat.inc");
if (description)
{
script_id(82896);
script_version("1.19");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/02/05");
script_cve_id("CVE-2014-3586", "CVE-2014-8111", "CVE-2015-0226", "CVE-2015-0227", "CVE-2015-0277", "CVE-2015-6254");
script_bugtraq_id(74265, 74266, 74393);
script_xref(name:"RHSA", value:"2015:0847");
script_name(english:"RHEL 6 : JBoss EAP (RHSA-2015:0847)");
script_summary(english:"Checks the rpm output for the updated packages");
script_set_attribute(
attribute:"synopsis",
value:"The remote Red Hat host is missing one or more security updates."
);
script_set_attribute(
attribute:"description",
value:
"Updated packages that provide Red Hat JBoss Enterprise Application
Platform 6.4.0, and fix multiple security issues, several bugs, and
add various enhancements, are now available for Red Hat Enterprise
Linux 6.
Red Hat Product Security has rated this update as having Important
security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was found that a prior countermeasure in Apache WSS4J for
Bleichenbacher's attack on XML Encryption (CVE-2011-2487) threw an
exception that permitted an attacker to determine the failure of the
attempted attack, thereby leaving WSS4J vulnerable to the attack. The
original flaw allowed a remote attacker to recover the entire plain
text form of a symmetric key. (CVE-2015-0226)
It was found that Apache WSS4J permitted bypass of the
requireSignedEncryptedDataElements configuration property via XML
Signature wrapping attacks. A remote attacker could use this flaw to
modify the contents of a signed request. (CVE-2015-0227)
It was discovered that a JkUnmount rule for a subtree of a previous
JkMount rule could be ignored. This could allow a remote attacker to
potentially access a private artifact in a tree that would otherwise
not be accessible to them. (CVE-2014-8111)
A flaw was found in the way PicketLink's Service Provider and Identity
Provider handled certain requests. A remote attacker could use this
flaw to log to a victim's account via PicketLink. (CVE-2015-0277)
It was found that the Command Line Interface, as provided by Red Hat
Enterprise Application Platform, created a history file named
.jboss-cli-history in the user's home directory with insecure default
file permissions. This could allow a malicious local user to gain
information otherwise not accessible to them. (CVE-2014-3586)
The CVE-2015-0277 issue was discovered by Ondrej Kotek of Red Hat.
This release of JBoss Enterprise Application Platform also includes
bug fixes and enhancements. Documentation for these changes will be
available shortly from the JBoss Enterprise Application Platform 6.4.0
Release Notes, linked to in the References.
All users who require JBoss Enterprise Application Platform 6.4.0 on
Red Hat Enterprise Linux 6 should install these new packages. The
JBoss server process must be restarted for the update to take effect."
);
script_set_attribute(
attribute:"see_also",
value:"https://access.redhat.com/errata/RHSA-2015:0847"
);
script_set_attribute(
attribute:"see_also",
value:"https://access.redhat.com/security/cve/cve-2014-3586"
);
script_set_attribute(
attribute:"see_also",
value:"https://access.redhat.com/security/cve/cve-2014-8111"
);
script_set_attribute(
attribute:"see_also",
value:"https://access.redhat.com/security/cve/cve-2015-0226"
);
script_set_attribute(
attribute:"see_also",
value:"https://access.redhat.com/security/cve/cve-2015-0227"
);
script_set_attribute(
attribute:"see_also",
value:"https://access.redhat.com/security/cve/cve-2015-0277"
);
script_set_attribute(attribute:"solution", value:"Update the affected packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
script_set_cvss3_temporal_vector("CVSS:3.0/E:X/RL:O/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-cli-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-codec-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-configuration-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-daemon-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-io-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-lang-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-pool-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-mime4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atinject-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:avro-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cal10n-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:codehaus-jackson");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:codehaus-jackson-core-asl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:codehaus-jackson-jaxrs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:codehaus-jackson-mapper-asl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:codehaus-jackson-xc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ecj-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-jaf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-javamail");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-jsf-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-jsf12-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate-beanvalidation-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate-jpa-2.0-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate3-commons-annotations");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-core-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-entitymanager-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-envers-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-infinispan-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-search");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hibernate4-validator");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hornetq");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hornetq-native");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpclient-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpcomponents-client-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpcomponents-core-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpcomponents-project-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpcore-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpd");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpd-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpd-manual");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpd-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpmime-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpserver");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-cachestore-jdbc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-cachestore-remote");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-client-hotrod");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:infinispan-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-api-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-impl-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-common-spi-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-core-api-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-core-impl-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-deployers-common-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-jdbc-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-spec-api-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ironjacamar-validator-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jandex-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jansi-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:javassist-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-deployment");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-framework-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-metadata");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-repository");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-resolver");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-spi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbosgi-vfs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-aesh");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-annotations-api_1.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-appclient");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-cli");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-client-all");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-clustering");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-cmp");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-configadmin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-connector");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-console");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-controller");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-controller-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-core-security");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-deployment-repository");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-deployment-scanner");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-domain-http");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-domain-management");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ee");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ee-deployment");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-ejb3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-embedded");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-host-controller");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jacorb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jaxr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jaxrs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jdr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jmx");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jpa");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jsf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-jsr77");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-logging");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-mail");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-management-client-content");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-messaging");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-modcluster");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-naming");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-network");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi-configadmin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-osgi-service");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-picketlink");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-platform-mbean");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-pojo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-process-controller");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-protocol");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-remoting");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-sar");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-security");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-system-jmx");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-threads");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-transactions");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-version");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-web");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-webservices");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-weld");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-as-xts");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-classfilewriter");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-common-beans");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-common-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-connector-api_1.6_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-dmr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-ejb-api_3.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-ejb-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-genericjms");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-hal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-iiop-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-interceptors-api_1.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-j2eemgmt-api_1.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jad-api_1.2_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jaspi-api_1.0_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jaxb-api_2.2_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jaxr-api_1.0_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jaxrpc-api_1.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jaxrs-api_1.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jms-api_1.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-jsp-api_2.2_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-logging");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-logmanager");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-metadata");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-metadata-appclient");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-metadata-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-metadata-ear");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-metadata-ejb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-metadata-web");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-osgi-logging");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-remote-naming");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-rmi-api_1.0_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-sasl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-seam-int");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-servlet-api_2.5_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-servlet-api_3.0_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-threads");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-transaction-api_1.1_spec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-vfs2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-weld-1.1-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-xnio-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-appclient");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-bundles");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-domain");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-hornetq-native");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-javadocs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-jbossweb-native");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-modules-eap");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-product-eap");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-standalone");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossas-welcome-content-eap");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossts");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossweb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jbossxb2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jcip-annotations-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jdom-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:joda-time-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jul-to-slf4j-stub");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:log4j-jboss-logmanager");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:lucene-solr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster-demo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_cluster-native");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_jk-ap22");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_rt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_snmp");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mod_ssl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:objectweb-asm-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.osgi.core-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:org.osgi.enterprise-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketbox");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketbox-commons");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketlink-bindings");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:picketlink-federation");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:relaxngDatatype-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:resteasy");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rngom-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:snakeyaml-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:staxmapper");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sun-codemodel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sun-txw2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sun-ws-metadata-2.0-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sun-xsom");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:tomcat-native");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:velocity-eap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:weld-cdi-1.0-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:xml-commons-resolver-eap6");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6");
script_set_attribute(attribute:"vuln_publication_date", value:"2015/02/12");
script_set_attribute(attribute:"patch_publication_date", value:"2015/04/16");
script_set_attribute(attribute:"plugin_publication_date", value:"2015/04/20");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Red Hat Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
os_ver = os_ver[1];
if (! preg(pattern:"^6([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 6.x", "Red Hat " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
if (!empty_or_null(yum_updateinfo))
{
rhsa = "RHSA-2015:0847";
yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
if (!empty_or_null(yum_report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : yum_report
);
exit(0);
}
else
{
audit_message = "affected by Red Hat security advisory " + rhsa;
audit(AUDIT_OS_NOT, audit_message);
}
}
else
{
flag = 0;
if (! (rpm_exists(release:"RHEL6", rpm:"jbossas-welcome-content-eap"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, "JBoss EAP");
if (rpm_check(release:"RHEL6", reference:"apache-commons-cli-eap6-1.2.0-1.redhat_8.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"apache-commons-codec-eap6-1.4.0-4.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"apache-commons-configuration-eap6-1.6.0-1.redhat_4.2.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"apache-commons-daemon-eap6-1.0.15-8.redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"apache-commons-io-eap6-2.1.0-1.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"apache-commons-lang-eap6-2.6.0-1.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"apache-commons-pool-eap6-1.6.0-1.redhat_7.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"apache-mime4j-0.6.0-1.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"atinject-eap6-1.0.0-1.redhat_5.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"avro-eap6-1.7.5-2.redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"cal10n-eap6-0.7.7-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"codehaus-jackson-1.9.9-10.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"codehaus-jackson-core-asl-1.9.9-10.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"codehaus-jackson-jaxrs-1.9.9-10.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"codehaus-jackson-mapper-asl-1.9.9-10.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"codehaus-jackson-xc-1.9.9-10.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ecj-eap6-4.4.2-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"glassfish-jaf-1.1.1-17.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"glassfish-javamail-1.4.5-2.redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"glassfish-jsf-eap6-2.1.28-7.redhat_8.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"glassfish-jsf12-eap6-1.2.15-8.b01_redhat_12.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate-beanvalidation-api-1.0.0-5.GA_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate-jpa-2.0-api-1.0.1-6.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate3-commons-annotations-4.0.2-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate4-core-eap6-4.2.18-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate4-eap6-4.2.18-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate4-entitymanager-eap6-4.2.18-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate4-envers-eap6-4.2.18-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate4-infinispan-eap6-4.2.18-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate4-search-4.6.0-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hibernate4-validator-4.3.2-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"hornetq-2.3.25-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"hornetq-native-2.3.25-3.Final_redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"hornetq-native-2.3.25-3.Final_redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"httpclient-eap6-4.3.6-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"httpcomponents-client-eap6-4.3.6-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"httpcomponents-core-eap6-4.3.3-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"httpcomponents-project-eap6-7.0.0-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"httpcore-eap6-4.3.3-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"httpd-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"httpd-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"httpd-devel-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"httpd-devel-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"httpd-manual-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"httpd-manual-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"httpd-tools-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"httpd-tools-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"httpmime-eap6-4.3.6-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"httpserver-1.0.4-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"infinispan-5.2.11-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"infinispan-cachestore-jdbc-5.2.11-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"infinispan-cachestore-remote-5.2.11-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"infinispan-client-hotrod-5.2.11-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"infinispan-core-5.2.11-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-common-api-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-common-impl-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-common-spi-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-core-api-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-core-impl-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-deployers-common-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-jdbc-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-spec-api-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"ironjacamar-validator-eap6-1.0.31-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jandex-eap6-1.2.2-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jansi-eap6-1.9.0-1.redhat_5.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"javassist-eap6-3.18.1-6.GA_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbosgi-deployment-1.3.0-5.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbosgi-framework-core-2.1.0-5.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbosgi-metadata-2.2.0-4.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbosgi-repository-2.1.0-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbosgi-resolver-3.0.1-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbosgi-spi-3.2.0-3.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbosgi-vfs-1.2.1-5.Final_redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-aesh-0.33.14-1.redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-annotations-api_1.1_spec-1.0.1-5.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-appclient-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-cli-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-client-all-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-clustering-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-cmp-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-configadmin-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-connector-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-console-2.5.5-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-controller-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-controller-client-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-core-security-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-deployment-repository-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-deployment-scanner-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-domain-http-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-domain-management-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-ee-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-ee-deployment-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-ejb3-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-embedded-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-host-controller-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jacorb-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jaxr-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jaxrs-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jdr-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jmx-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jpa-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jsf-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-jsr77-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-logging-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-mail-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-management-client-content-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-messaging-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-modcluster-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-naming-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-network-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-osgi-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-osgi-configadmin-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-osgi-service-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-picketlink-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-platform-mbean-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-pojo-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-process-controller-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-protocol-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-remoting-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-sar-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-security-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-server-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-system-jmx-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-threads-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-transactions-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-version-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-web-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-webservices-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-weld-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-as-xts-7.5.0-8.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-classfilewriter-1.0.3-3.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-common-beans-1.1.0-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-common-core-2.2.17-11.GA_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-connector-api_1.6_spec-1.0.1-5.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-dmr-1.2.2-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-ejb-api_3.1_spec-1.0.2-11.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-ejb-client-1.0.30-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-genericjms-1.0.7-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-hal-2.5.5-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-iiop-client-1.0.0-5.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-interceptors-api_1.1_spec-1.0.1-6.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-j2eemgmt-api_1.1_spec-1.0.1-6.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jad-api_1.2_spec-1.0.1-7.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jaspi-api_1.0_spec-1.0.1-7.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jaxb-api_2.2_spec-1.0.4-4.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jaxr-api_1.0_spec-1.0.2-6.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jaxrpc-api_1.1_spec-1.0.1-5.Final_redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jaxrs-api_1.1_spec-1.0.1-10.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jms-api_1.1_spec-1.0.1-13.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-jsp-api_2.2_spec-1.0.2-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-logging-3.1.4-2.GA_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-logmanager-1.5.4-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-metadata-7.2.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-metadata-appclient-7.2.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-metadata-common-7.2.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-metadata-ear-7.2.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-metadata-ejb-7.2.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-metadata-web-7.2.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-modules-1.3.6-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-osgi-logging-1.0.0-7.redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-remote-naming-1.0.10-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-rmi-api_1.0_spec-1.0.4-10.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-sasl-1.0.5-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-seam-int-6.0.0-10.GA_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-servlet-api_2.5_spec-1.0.1-10.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-servlet-api_3.0_spec-1.0.2-4.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-threads-2.1.2-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-transaction-api_1.1_spec-1.0.1-13.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-vfs2-3.2.9-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-weld-1.1-api-1.1.0-1.Final_redhat_6.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jboss-xnio-base-3.0.13-1.GA_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-appclient-7.5.0-9.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-bundles-7.5.0-9.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-core-7.5.0-11.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-domain-7.5.0-9.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"jbossas-hornetq-native-2.3.25-3.Final_redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"jbossas-hornetq-native-2.3.25-3.Final_redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-javadocs-7.5.0-23.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"jbossas-jbossweb-native-1.1.32-3.redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"jbossas-jbossweb-native-1.1.32-3.redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-modules-eap-7.5.0-14.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-product-eap-7.5.0-9.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-standalone-7.5.0-9.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossas-welcome-content-eap-7.5.0-9.Final_redhat_21.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossts-4.17.29-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossweb-7.5.7-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jbossxb2-2.0.3-15.GA_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jcip-annotations-eap6-1.0.0-1.redhat_7.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jdom-eap6-1.1.3-1.redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"joda-time-eap6-1.6.2-2.redhat_5.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"jul-to-slf4j-stub-1.0.1-2.Final_redhat_2.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"log4j-jboss-logmanager-1.1.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"lucene-solr-3.6.2-5.redhat_8.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"mod_cluster-1.2.11-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"mod_cluster-demo-1.2.11-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"mod_cluster-native-1.2.11-2.Final_redhat_2.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"mod_cluster-native-1.2.11-2.Final_redhat_2.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"mod_jk-ap22-1.2.40-3.redhat_2.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"mod_jk-ap22-1.2.40-3.redhat_2.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"mod_rt-2.4.1-6.GA.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"mod_rt-2.4.1-6.GA.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"mod_snmp-2.4.1-13.GA.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"mod_snmp-2.4.1-13.GA.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"mod_ssl-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"mod_ssl-2.2.26-38.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"objectweb-asm-eap6-3.3.1-8.redhat_9.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"org.osgi.core-eap6-4.2.0-14.redhat_8.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"org.osgi.enterprise-eap6-4.2.0-15.redhat_10.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"picketbox-4.1.1-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"picketbox-commons-1.0.0-1.final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"picketlink-bindings-2.5.4-5.SP4_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"picketlink-federation-2.5.4-5.SP4_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"relaxngDatatype-eap6-2011.1.0-1.redhat_9.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"resteasy-2.3.10-1.Final_redhat_1.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"rngom-eap6-201103.0.0-1.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"snakeyaml-eap6-1.8.0-1.redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"staxmapper-1.1.0-7.Final_redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"sun-codemodel-2.6.0-1.redhat_3.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"sun-txw2-20110809.0.0-1.redhat_5.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"sun-ws-metadata-2.0-api-1.0.0-2.MR1_redhat_7.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"sun-xsom-20110809.0.0-1.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i386", reference:"tomcat-native-1.1.32-3.redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"tomcat-native-1.1.32-3.redhat_1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"velocity-eap6-1.7.0-1.redhat_4.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"weld-cdi-1.0-api-1.0.0-1.SP4_redhat_5.1.ep6.el6")) flag++;
if (rpm_check(release:"RHEL6", reference:"xml-commons-resolver-eap6-1.2.0-1.redhat_10.2.ep6.el6")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get() + redhat_report_package_caveat()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "apache-commons-cli-eap6 / apache-commons-codec-eap6 / etc");
}
}
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | enterprise_linux | apache-commons-cli-eap6 | p-cpe:/a:redhat:enterprise_linux:apache-commons-cli-eap6 |
| redhat | enterprise_linux | apache-commons-codec-eap6 | p-cpe:/a:redhat:enterprise_linux:apache-commons-codec-eap6 |
| redhat | enterprise_linux | apache-commons-configuration-eap6 | p-cpe:/a:redhat:enterprise_linux:apache-commons-configuration-eap6 |
| redhat | enterprise_linux | apache-commons-daemon-eap6 | p-cpe:/a:redhat:enterprise_linux:apache-commons-daemon-eap6 |
| redhat | enterprise_linux | apache-commons-io-eap6 | p-cpe:/a:redhat:enterprise_linux:apache-commons-io-eap6 |
| redhat | enterprise_linux | apache-commons-lang-eap6 | p-cpe:/a:redhat:enterprise_linux:apache-commons-lang-eap6 |
| redhat | enterprise_linux | apache-commons-pool-eap6 | p-cpe:/a:redhat:enterprise_linux:apache-commons-pool-eap6 |
| redhat | enterprise_linux | apache-mime4j | p-cpe:/a:redhat:enterprise_linux:apache-mime4j |
| redhat | enterprise_linux | atinject-eap6 | p-cpe:/a:redhat:enterprise_linux:atinject-eap6 |
| redhat | enterprise_linux | avro-eap6 | p-cpe:/a:redhat:enterprise_linux:avro-eap6 |
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3586
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8111
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0226
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0227
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0277
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6254
access.redhat.com/errata/RHSA-2015:0847
access.redhat.com/security/cve/cve-2014-3586
access.redhat.com/security/cve/cve-2014-8111
access.redhat.com/security/cve/cve-2015-0226
access.redhat.com/security/cve/cve-2015-0227
access.redhat.com/security/cve/cve-2015-0277
Related
nessus
nessus
RHEL 5 : JBoss EAP (RHSA-2015:0846)
2015-04-20 00:00:00
RHEL 7 : JBoss EAP (RHSA-2015:0848)
2018-09-04 00:00:00
Debian DLA-240-1 : libapache-mod-jk security update
2015-06-10 00:00:00
redhat
redhat
prion
prion
Design/Logic Flaw
2015-08-17 20:59:00
Code injection
2015-08-17 20:59:00
Design/Logic Flaw
2017-10-30 14:29:00
cve
cve
cvelist
cvelist
nvd
nvd
ubuntucve
ubuntucve
osv
osv
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
2022-05-14 00:55:57
libapache-mod-jk - security update
2015-06-09 00:00:00
libapache-mod-jk - security update
2015-06-03 00:00:00
github
github
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
2022-05-14 00:55:57
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
2022-04-22 00:24:28
Improper Access Control in Apache WSS4J
2022-05-14 02:57:28
debiancve
debiancve
ibm
ibm
mageia
mageia
Updated apache-mod_jk package fixes security vulnerability
2015-07-01 16:23:59
securityvulns
securityvulns
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-08 00:00:00
Apache mod_jk information disclosure
2015-06-08 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-240-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3278-1)
2015-06-02 00:00:00
debian
debian
[SECURITY] [DLA 240-1] libapache-mod-jk security update
2015-06-09 18:22:41
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-03 19:14:32
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-03 19:14:32
tomcat
tomcat
Fixed in Apache Tomcat JK Connector 1.2.41
2014-10-10 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 09:07:28
Information Disclosure
2019-01-15 09:05:33
Authentication Bypass
2019-05-02 04:45:00
freebsd
freebsd
mod_jk -- information disclosure
2015-01-15 00:00:00
f5
f5
K15580 : Apache CXF and JBoss vulnerabilities
2014-09-11 00:00:00
SOL15580 - Apache CXF and JBoss vulnerabilities
2014-09-11 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.007 Low
EPSS
Percentile
80.4%
Related for REDHAT-RHSA-2015-0847.NASL