RHSA-2023:4507

HIGH7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

Published Sep 30, 2024

Modified 1 weeks ago

Fix available

Affected Packages

eap7-jettison

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:1.5.4-1.redhat_00002.1.el9eap

eap7-undertow

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:2.2.25-3.SP3_redhat_00001.1.el9eap

eap7-wildfly

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:7.4.12-3.GA_redhat_00003.1.el9eap

eap7-wildfly-java-jdk11

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:7.4.12-3.GA_redhat_00003.1.el9eap

eap7-wildfly-java-jdk17

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:7.4.12-3.GA_redhat_00003.1.el9eap

eap7-wildfly-java-jdk8

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:7.4.12-3.GA_redhat_00003.1.el9eap

eap7-wildfly-javadocs

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:7.4.12-3.GA_redhat_00003.1.el9eap

eap7-wildfly-modules

Red Hat jboss_enterprise_application_platform 7.4 el9

Fixed in:

0:7.4.12-3.GA_redhat_00003.1.el9eap

References(39)

ARTICLE

https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/

ARTICLE

https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/

ADVISORY

https://access.redhat.com/errata/RHSA-2023:4507

REPORT

https://access.redhat.com/security/cve/CVE-2021-46877

REPORT

https://access.redhat.com/security/cve/CVE-2023-1436

REPORT

https://access.redhat.com/security/cve/CVE-2023-3223

ARTICLE

https://access.redhat.com/security/updates/classification/#important

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2182788

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2185707

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2209689

ARTICLE

https://issues.redhat.com/browse/JBEAP-24711

ARTICLE

https://issues.redhat.com/browse/JBEAP-24722

ARTICLE

https://issues.redhat.com/browse/JBEAP-24744

ARTICLE

https://issues.redhat.com/browse/JBEAP-24745

ARTICLE

https://issues.redhat.com/browse/JBEAP-24790

ARTICLE

https://issues.redhat.com/browse/JBEAP-24808

ARTICLE

https://issues.redhat.com/browse/JBEAP-24819

ARTICLE

https://issues.redhat.com/browse/JBEAP-24820

ARTICLE

https://issues.redhat.com/browse/JBEAP-24821

ARTICLE

https://issues.redhat.com/browse/JBEAP-24822

ARTICLE

https://issues.redhat.com/browse/JBEAP-24831

ARTICLE

https://issues.redhat.com/browse/JBEAP-24832

ARTICLE

https://issues.redhat.com/browse/JBEAP-24835

ARTICLE

https://issues.redhat.com/browse/JBEAP-24836

ARTICLE

https://issues.redhat.com/browse/JBEAP-24858

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2021-46877 CVE-2023-1436 CVE-2023-3223

Ecosystems

Red Hat jboss_enterprise_application_platform 7.4 el9

Timeline

PublishedSep 30, 2024

ModifiedMar 21, 2026