Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2017:0170
HistoryJan 18, 2017 - 6:37 p.m.

(RHSA-2017:0170) Moderate: JBoss Enterprise Application Platform 7.0.4 on RHEL 6

2017-01-1818:37:50
access.redhat.com
25

0.005 Low

EPSS

Percentile

77.1%

JSON

This release of Red Hat JBoss Enterprise Application Platform 7.0.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.0.3, and includes bug fixes and enhancements, which are documented in the Release Notes, linked to in the References section.

Security Fix(es):

  • An EAP feature to download server log files allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user’s browser to request the log files consuming enough resources that normal server functioning could be impaired. (CVE-2016-8627)

  • It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information. (CVE-2016-7061)

The CVE-2016-8627 issue was discovered by Darran Lofthouse and Brian Stansberry (Red Hat).

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.

OSVersionArchitecturePackageVersionFilename
RedHat6noarcheap7-resteasy-validator-provider-11< 3.0.19-2.Final_redhat_1.1.ep7.el6eap7-resteasy-validator-provider-11-3.0.19-2.Final_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-wss4j-policy< 2.1.7-2.redhat_1.1.ep7.el6eap7-wss4j-policy-2.1.7-2.redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-ironjacamar-validator< 1.3.5-1.Final_redhat_1.1.ep7.el6eap7-ironjacamar-validator-1.3.5-1.Final_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-picketlink-api< 2.5.5-4.SP4_redhat_1.1.ep7.el6eap7-picketlink-api-2.5.5-4.SP4_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-narayana-compensations< 5.2.21-1.Final_redhat_1.1.ep7.el6eap7-narayana-compensations-5.2.21-1.Final_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-resteasy-spring< 3.0.19-2.Final_redhat_1.1.ep7.el6eap7-resteasy-spring-3.0.19-2.Final_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-narayana-restat-util< 5.2.21-1.Final_redhat_1.1.ep7.el6eap7-narayana-restat-util-5.2.21-1.Final_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-resteasy-jaxb-provider< 3.0.19-2.Final_redhat_1.1.ep7.el6eap7-resteasy-jaxb-provider-3.0.19-2.Final_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-ironjacamar-common-impl< 1.3.5-1.Final_redhat_1.1.ep7.el6eap7-ironjacamar-common-impl-1.3.5-1.Final_redhat_1.1.ep7.el6.noarch.rpm
RedHat6noarcheap7-resteasy-jackson-provider< 3.0.19-2.Final_redhat_1.1.ep7.el6eap7-resteasy-jackson-provider-3.0.19-2.Final_redhat_1.1.ep7.el6.noarch.rpm
Rows per page:
1-10 of 751

Related

nessus 10
redhat 12
redhatcve 2
prion 2
osv 1
cve 2
veracode 2
cvelist 2
nvd 2
nessus
nessus
RHEL 7 : JBoss EAP (RHSA-2017:0171)
2017-02-03 00:00:00
RHEL 6 / 7 : eap7-jboss-ec2-eap (RHSA-2017:0173)
2018-08-29 00:00:00
RHEL 6 : JBoss Enterprise Application Platform 7.0.4 on RHEL 6 (Moderate) (RHSA-2017:0170)
2017-02-03 00:00:00
redhat
redhat
(RHSA-2017:0173) Moderate: eap7-jboss-ec2-eap security update
2017-01-18 21:58:54
(RHSA-2017:0172) Moderate: Red Hat JBoss Enterprise Application Platform 7.0.4
2017-01-18 18:38:22
(RHSA-2017:0171) Moderate: JBoss Enterprise Application Platform 7.0.4 for RHEL 7
2017-01-18 18:38:06
redhatcve
redhatcve
CVE-2016-8627
2020-01-21 15:34:49
CVE-2016-7061
2016-11-07 01:47:19
prion
prion
Design/Logic Flaw
2018-05-11 13:29:00
Information disclosure
2018-09-10 16:29:00
osv
osv
CVE-2016-8627
2018-05-11 13:29:00
cve
cve
CVE-2016-8627
2018-05-11 13:29:00
CVE-2016-7061
2018-09-10 16:29:00
veracode
veracode
Information Disclosure
2019-01-15 09:15:04
Information Disclosure
2019-05-02 06:09:25
cvelist
cvelist
CVE-2016-7061
2018-09-10 16:00:00
CVE-2016-8627
2018-05-11 13:00:00
nvd
nvd
CVE-2016-8627
2018-05-11 13:29:00
CVE-2016-7061
2018-09-10 16:29:00

0.005 Low

EPSS

Percentile

77.1%

JSON
Related for RHSA-2017:0170
nessus10redhat12redhatcve2prion2osv1cve2veracode2cvelist2nvd2