RedHatRHSA-2019:2973(RHSA-2019:2973) Important: Red Hat JBoss Enterprise Application Platform 7.2 security update
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
37.0%
Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on Wildfly.
This asynchronous patch is a security update for wildfly-security-manager package in Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6, 7, and 8.
Security Fix(es):
- wildfly: wildfly-security-manager: security manager authorization bypass (CVE-2019-14843)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | eap7-wildfly-elytron | < 1.6.4-3.Final_redhat_00002.1.el7eap | eap7-wildfly-elytron-1.6.4-3.Final_redhat_00002.1.el7eap.noarch.rpm |
| RedHat | 8 | noarch | eap7-wildfly-elytron | < 1.6.4-3.Final_redhat_00002.1.el8eap | eap7-wildfly-elytron-1.6.4-3.Final_redhat_00002.1.el8eap.noarch.rpm |
| RedHat | 6 | noarch | eap7-wildfly-elytron | < 1.6.4-3.Final_redhat_00002.1.el6eap | eap7-wildfly-elytron-1.6.4-3.Final_redhat_00002.1.el6eap.noarch.rpm |
Related
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
37.0%