(RHSA-2017:3124) Moderate: Red Hat JBoss Enterprise Application Platform 7.0 security update

Red Hat JBoss Enterprise Application Platform is a platform for Java
applications based on the JBoss Application Server.

This asynchronous patch is a security update for lucene package in Red Hat JBoss Enterprise Application Platform 7.0.8

Security Fix(es):

• It was found that Apache Lucene would accept an object from an unauthenticated user that could be manipulated through subsequent post requests. An attacker could use this flaw to assemble an object that could permit execution of arbitrary code if the server enabled Apache Solr’s Config API. (CVE-2017-12629)

For more information regarding CVE-2017-12629, see the article linked in the references section.