Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 6/jbossas

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Incorrect Authorization in WildFly ElytronCVE-2020-1748 · GHSA-QGRQ-CX4C-2RMM org.wildfly.security:wildfly-elytronRed Hat Fuse 7/wildfly MavenRed Hat High Fix reported
Wildfly-Core user account mismanagementCVE-2021-3717 · GHSA-P9XF-3RM3-QH2H org.wildfly.core:wildfly-core-parentRed Hat Data Grid 8/wildfly MavenRed Hat High Fix reported
Wildfly has a memory leak vulnerabilityCVE-2020-27822 · GHSA-QX3P-9MMP-4V8H org.wildfly:wildfly-parentRed Hat JBoss Data Grid 7/wildfly MavenRed Hat Medium Fix reported
Wildfly Unsafe Deserialization VulnerabilityCVE-2020-10740 · GHSA-VRMW-2XHQ-HRMP org.wildfly:wildfly-parentRed Hat JBoss Data Virtualization 6/jbossas MavenRed Hat High Fix reported
Wildfly logs plaintext passwordsCVE-2020-25640 · GHSA-JW3V-5CH2-WFMM org.wildfly:wildfly-parentRed Hat JBoss Data Grid 7/wildfly MavenRed Hat Medium Fix reported
Privilege Context Switching Error in wildlfyCVE-2020-1719 · GHSA-P9CF-QJXQ-VXW6 org.wildfly.bom:wildflyRed Hat JBoss Data Virtualization 6/jbossas MavenRed Hat Medium Fix reported
httpd: mod_mime buffer overreadCVE-2017-7679 Red Hat Enterprise Linux 5/httpdRed Hat JBoss Enterprise Application Platform 5/jbossas Red Hat Medium No fix reported
httpd: mod_ssl NULL pointer dereferenceCVE-2017-3169 Red Hat Enterprise Linux 5/httpdRed Hat JBoss Enterprise Application Platform 6/jbossas Red Hat Medium No fix reported
httpd: ap_get_basic_auth_pw() authentication bypassCVE-2017-3167 Red Hat Enterprise Linux 5/httpdRed Hat JBoss Enterprise Application Platform 6/jbossas Red Hat Medium No fix reported
wildfly: Race condition on PID file allows for termination of arbitrary processes by local usersCVE-2019-3805 Red Hat JBoss Data Virtualization 6/jbossasRed Hat JBoss Enterprise Application Platform 6/jbossas Red Hat Medium No fix reported
Soteria: security identity corruption across concurrent threadsCVE-2020-1732 Red Hat JBoss Data Virtualization 6/jbossasRed Hat JBoss Data Virtualization 6/wildfly Red Hat Low No fix reported
wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in useCVE-2019-14887 Red Hat JBoss Data Grid 7/wildflyRed Hat JBoss Data Virtualization 6/jbossas Red Hat Medium No fix reported
wildfly: exposed setting of TCCL via the EmbeddedManagedProcess APICVE-2020-10718 Red Hat Fuse 7/wildflyRed Hat JBoss Data Grid 7/wildfly Red Hat Medium No fix reported