(RHSA-2017:0171) Moderate: JBoss Enterprise Application Platform 7.0.4 for RHEL 7

2017-01-1818:38:06

access.redhat.com

EPSS

0.005

Percentile

77.1%

JSON

This release of Red Hat JBoss Enterprise Application Platform 7.0.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.0.3, and includes bug fixes and enhancements, which are documented in the Release Notes, linked to in the References section.

Security Fix(es):

An EAP feature to download server log files allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user’s browser to request the log files consuming enough resources that normal server functioning could be impaired. (CVE-2016-8627)
It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information. (CVE-2016-7061)

The CVE-2016-8627 issue was discovered by Darran Lofthouse and Brian Stansberry (Red Hat).

OSVersionArchitecturePackageVersionFilename
RedHat7noarcheap7-picketlink-common< 2.5.5-4.SP4_redhat_1.1.ep7.el7eap7-picketlink-common-2.5.5-4.SP4_redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-resteasy-client< 3.0.19-2.Final_redhat_1.1.ep7.el7eap7-resteasy-client-3.0.19-2.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-narayana-restat-integration< 5.2.21-1.Final_redhat_1.1.ep7.el7eap7-narayana-restat-integration-5.2.21-1.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-wss4j-ws-security-stax< 2.1.7-2.redhat_1.1.ep7.el7eap7-wss4j-ws-security-stax-2.1.7-2.redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-wildfly-modules< 7.0.4-4.GA_redhat_2.1.ep7.el7eap7-wildfly-modules-7.0.4-4.GA_redhat_2.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-resteasy-jose-jwt< 3.0.19-2.Final_redhat_1.1.ep7.el7eap7-resteasy-jose-jwt-3.0.19-2.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-resteasy-multipart-provider< 3.0.19-2.Final_redhat_1.1.ep7.el7eap7-resteasy-multipart-provider-3.0.19-2.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-ironjacamar-jdbc< 1.3.5-1.Final_redhat_1.1.ep7.el7eap7-ironjacamar-jdbc-1.3.5-1.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-ironjacamar-common-spi< 1.3.5-1.Final_redhat_1.1.ep7.el7eap7-ironjacamar-common-spi-1.3.5-1.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat7noarcheap7-infinispan-core< 8.1.6-1.Final_redhat_1.1.ep7.el7eap7-infinispan-core-8.1.6-1.Final_redhat_1.1.ep7.el7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	eap7-picketlink-common	< 2.5.5-4.SP4_redhat_1.1.ep7.el7	eap7-picketlink-common-2.5.5-4.SP4_redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-resteasy-client	< 3.0.19-2.Final_redhat_1.1.ep7.el7	eap7-resteasy-client-3.0.19-2.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-narayana-restat-integration	< 5.2.21-1.Final_redhat_1.1.ep7.el7	eap7-narayana-restat-integration-5.2.21-1.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-wss4j-ws-security-stax	< 2.1.7-2.redhat_1.1.ep7.el7	eap7-wss4j-ws-security-stax-2.1.7-2.redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-wildfly-modules	< 7.0.4-4.GA_redhat_2.1.ep7.el7	eap7-wildfly-modules-7.0.4-4.GA_redhat_2.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-resteasy-jose-jwt	< 3.0.19-2.Final_redhat_1.1.ep7.el7	eap7-resteasy-jose-jwt-3.0.19-2.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-resteasy-multipart-provider	< 3.0.19-2.Final_redhat_1.1.ep7.el7	eap7-resteasy-multipart-provider-3.0.19-2.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-ironjacamar-jdbc	< 1.3.5-1.Final_redhat_1.1.ep7.el7	eap7-ironjacamar-jdbc-1.3.5-1.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-ironjacamar-common-spi	< 1.3.5-1.Final_redhat_1.1.ep7.el7	eap7-ironjacamar-common-spi-1.3.5-1.Final_redhat_1.1.ep7.el7.noarch.rpm
RedHat	7	noarch	eap7-infinispan-core	< 8.1.6-1.Final_redhat_1.1.ep7.el7	eap7-infinispan-core-8.1.6-1.Final_redhat_1.1.ep7.el7.noarch.rpm

Rows per page:

1-10 of 751

EPSS

0.005

Percentile

77.1%

JSON

Related for RHSA-2017:0171