redhat jboss enterprise application platform expansion pack - vulnerabilities and exploits

(subscribe to this query)

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an malicious user to access remote HTTP services available from the server.

Redhat Jboss Enterprise Application Platform -Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Jboss Enterprise Application Platform 7.4

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

Redhat Wildfly Redhat Single Sign-on 7.0 Redhat Amq 2.0 Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Jboss A-mq 7 Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Amq Online -

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

Redhat Descision Manager 7.0 Redhat Jboss Enterprise Application Platform 7.0.0 Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Process Automation 7.0 Redhat Single Sign-on 7.0

1 Github repository

A flaw was found in Wildfly Elytron in versions before 1.10.14.Final, before 1.15.5.Final and before 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.

Redhat Wildfly Elytron Redhat Build Of Quarkus -Redhat Codeready Studio 12.0 Redhat Data Grid 8.0 Redhat Descision Manager 7.0 Redhat Integration Camel K -Redhat Integration Camel Quarkus Redhat Jboss Enterprise Application Platform 7.0.0 Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Jboss Fuse 7.0.0 Redhat Openshift Application Runtimes -Redhat Process Automation 7.0 Quarkus Quarkus

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Jboss-ejb-client

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook