Vulnerabilities > CVE-2019-10202 - Deserialization of Untrusted Data vulnerability in Redhat Jboss Enterprise Application Platform 7.2.0

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

redhat

CWE-502

critical

nessus

NVD

Published: 2019-10-01

Updated: 2023-02-12

Summary

A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackson-databind by implementing a whitelist approach that will mitigate these vulnerabilities and future ones alike.

Vulnerable Configurations

Part	Description	Count
Application	Redhat Redhat Jboss Enterprise Application Platform 7.2.0	1
OS	Redhat Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0	3

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

Nessus

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-2936.NASL
description	An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release of Red Hat JBoss Enterprise Application Platform 7.2.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.3, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es) : * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files (CVE-2019-10212) * codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities (CVE-2019-10202) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)
last seen	2020-06-01
modified	2020-06-02
plugin id	129517
published	2019-10-02
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/129517
title	RHEL 7 : JBoss EAP (RHSA-2019:2936)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2019:2936. The text # itself is copyright (C) Red Hat, Inc. # include("compat.inc"); if (description) { script_id(129517); script_version("1.4"); script_cvs_date("Date: 2019/12/23"); script_cve_id("CVE-2019-10184", "CVE-2019-10202", "CVE-2019-10212", "CVE-2019-12086", "CVE-2019-12384", "CVE-2019-12814", "CVE-2019-14379"); script_xref(name:"RHSA", value:"2019:2936"); script_name(english:"RHEL 7 : JBoss EAP (RHSA-2019:2936)"); script_summary(english:"Checks the rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Red Hat host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release of Red Hat JBoss Enterprise Application Platform 7.2.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.3, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es) : * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files (CVE-2019-10212) * codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities (CVE-2019-10202) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/documentation/en-us/" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2019:2936" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2019-10184" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2019-10202" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2019-10212" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2019-12086" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2019-12384" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2019-12814" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2019-14379" ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-cli"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-commons"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-core-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-dto"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-hornetq-protocol"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-hqclient-protocol"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-jdbc-store"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-jms-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-jms-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-journal"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-ra"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-selector"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-service-extensions"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-tools"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-core-asl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-jaxrs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-mapper-asl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-xc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-glassfish-jsf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hal-console"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-entitymanager"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-envers"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-java8"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-cachestore-jdbc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-cachestore-remote"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-client-hotrod"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-commons"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-hibernate-cache-commons"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-hibernate-cache-spi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-hibernate-cache-v53"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-common-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-common-impl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-common-spi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-core-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-core-impl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-deployers-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-jdbc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-validator"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-annotations"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-databind"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-datatype-jdk8"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-datatype-jsr310"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-jaxrs-base"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-jaxrs-json-provider"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-module-jaxb-annotations"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-modules-base"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-modules-java8"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-ejb-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-jaxrs-api_2.1_spec"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-logging"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-logmanager"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-marshalling"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-marshalling-river"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-msc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-remoting"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-cli"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap6.4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap6.4-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.0-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.1"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.1-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.0-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.1"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.1-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly11.0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly11.0-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly12.0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly12.0-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly13.0-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly14.0-server"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly8.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly8.2-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly9.0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly9.0-to-eap7.2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-xnio-base"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jgroups"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-compensations"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jbosstxbridge"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jbossxts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jts-idlj"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jts-integration"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-bridge"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-integration"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-util"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-txframework"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-netty"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-netty-all"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketbox"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketbox-infinispan"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-bindings"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-config"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-federation"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-idm-api"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-idm-impl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-idm-simple-schema"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-impl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-wildfly8"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-undertow"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-core-impl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-core-jsf"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-ejb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-jta"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-probe-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-web"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-elytron"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-elytron-tool"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-java-jdk11"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-java-jdk8"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-javadocs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-modules"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-transaction-client"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7"); script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/17"); script_set_attribute(attribute:"patch_publication_date", value:"2019/09/30"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/02"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Red Hat Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat"); os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat"); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 7.x", "Red Hat " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu); yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo"); if (!empty_or_null(yum_updateinfo)) { rhsa = "RHSA-2019:2936"; yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa); if (!empty_or_null(yum_report)) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : yum_report ); exit(0); } else { audit_message = "affected by Red Hat security advisory " + rhsa; audit(AUDIT_OS_NOT, audit_message); } } else { flag = 0; if (! (rpm_exists(release:"RHEL7", rpm:"eap7-jboss"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, "JBoss EAP"); if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-cli-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-commons-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-core-client-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-dto-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-hornetq-protocol-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-hqclient-protocol-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-jdbc-store-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-jms-client-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-jms-server-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-journal-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-ra-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-selector-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-server-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-service-extensions-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-tools-2.9.0-1.redhat_00005.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-1.9.13-9.redhat_00006.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-core-asl-1.9.13-9.redhat_00006.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-jaxrs-1.9.13-9.redhat_00006.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-mapper-asl-1.9.13-9.redhat_00006.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-xc-1.9.13-9.redhat_00006.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-glassfish-jsf-2.3.5-4.SP3_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-hal-console-3.0.16-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-5.3.11-2.SP1_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-core-5.3.11-2.SP1_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-entitymanager-5.3.11-2.SP1_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-envers-5.3.11-2.SP1_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-java8-5.3.11-2.SP1_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-cachestore-jdbc-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-cachestore-remote-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-client-hotrod-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-commons-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-core-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-hibernate-cache-commons-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-hibernate-cache-spi-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-hibernate-cache-v53-9.3.7-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-common-api-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-common-impl-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-common-spi-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-core-api-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-core-impl-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-deployers-common-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-jdbc-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-validator-1.4.17-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-annotations-2.9.9-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-core-2.9.9-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-databind-2.9.9.3-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-datatype-jdk8-2.9.9-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-datatype-jsr310-2.9.9-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-jaxrs-base-2.9.9-2.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-jaxrs-json-provider-2.9.9-2.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-module-jaxb-annotations-2.9.9-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-modules-base-2.9.9-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jackson-modules-java8-2.9.9-1.redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-ejb-client-4.0.23-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-jaxrs-api_2.1_spec-1.0.3-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-logging-3.3.3-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-logmanager-2.1.14-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-marshalling-2.0.9-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-marshalling-river-2.0.9-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-msc-1.4.8-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-remoting-5.0.14-1.SP1_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-cli-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-core-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap6.4-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap6.4-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.1-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.1-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.1-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.1-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly11.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly11.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly12.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly12.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly13.0-server-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly14.0-server-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly8.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly8.2-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly9.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly9.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jboss-xnio-base-3.7.3-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-jgroups-4.0.20-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-compensations-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jbosstxbridge-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jbossxts-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jts-idlj-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jts-integration-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-api-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-bridge-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-integration-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-util-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-narayana-txframework-5.9.6-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-netty-4.1.34-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-netty-all-4.1.34-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketbox-5.0.3-5.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketbox-infinispan-5.0.3-5.Final_redhat_00004.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-api-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-bindings-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-common-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-config-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-federation-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-idm-api-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-idm-impl-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-idm-simple-schema-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-impl-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-wildfly8-2.5.5-20.SP12_redhat_00007.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-undertow-2.0.25-1.SP1_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-weld-core-3.0.6-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-weld-core-impl-3.0.6-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-weld-core-jsf-3.0.6-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-weld-ejb-3.0.6-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-weld-jta-3.0.6-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-weld-probe-core-3.0.6-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-weld-web-3.0.6-2.Final_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-7.2.4-1.GA_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-elytron-1.6.4-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-elytron-tool-1.4.3-1.Final_redhat_00001.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-java-jdk11-7.2.4-1.GA_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-java-jdk8-7.2.4-1.GA_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-javadocs-7.2.4-1.GA_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-modules-7.2.4-1.GA_redhat_00002.1.el7")) flag++; if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-transaction-client-1.1.6-2.Final_redhat_00001.1.el7")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() + redhat_report_package_caveat() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "eap7-activemq-artemis / eap7-activemq-artemis-cli / etc"); } }

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-2935.NASL
description	An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release of Red Hat JBoss Enterprise Application Platform 7.2.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.3, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es) : * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files (CVE-2019-10212) * codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities (CVE-2019-10202) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)
last seen	2020-06-01
modified	2020-06-02
plugin id	129516
published	2019-10-02
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/129516
title	RHEL 6 : JBoss EAP (RHSA-2019:2935)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-2937.NASL
description	An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release of Red Hat JBoss Enterprise Application Platform 7.2.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.3, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es) : * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files (CVE-2019-10212) * codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities (CVE-2019-10202) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)
last seen	2020-06-01
modified	2020-06-02
plugin id	129518
published	2019-10-02
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/129518
title	RHEL 8 : JBoss EAP (RHSA-2019:2937)

Redhat

rpms

eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-cli-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-commons-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-core-client-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-dto-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-hornetq-protocol-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-hqclient-protocol-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-jdbc-store-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-jms-client-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-jms-server-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-journal-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-ra-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-selector-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-server-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-service-extensions-0:2.9.0-1.redhat_00005.1.el6eap
eap7-activemq-artemis-tools-0:2.9.0-1.redhat_00005.1.el6eap
eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el6eap
eap7-codehaus-jackson-core-asl-0:1.9.13-9.redhat_00006.1.el6eap
eap7-codehaus-jackson-jaxrs-0:1.9.13-9.redhat_00006.1.el6eap
eap7-codehaus-jackson-mapper-asl-0:1.9.13-9.redhat_00006.1.el6eap
eap7-codehaus-jackson-xc-0:1.9.13-9.redhat_00006.1.el6eap
eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el6eap
eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el6eap
eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el6eap
eap7-hibernate-core-0:5.3.11-2.SP1_redhat_00001.1.el6eap
eap7-hibernate-entitymanager-0:5.3.11-2.SP1_redhat_00001.1.el6eap
eap7-hibernate-envers-0:5.3.11-2.SP1_redhat_00001.1.el6eap
eap7-hibernate-java8-0:5.3.11-2.SP1_redhat_00001.1.el6eap
eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-cachestore-jdbc-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-cachestore-remote-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-client-hotrod-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-commons-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-core-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-hibernate-cache-commons-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-hibernate-cache-spi-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-infinispan-hibernate-cache-v53-0:9.3.7-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-common-api-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-common-impl-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-common-spi-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-core-api-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-core-impl-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-deployers-common-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-jdbc-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-ironjacamar-validator-0:1.4.17-1.Final_redhat_00001.1.el6eap
eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el6eap
eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el6eap
eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el6eap
eap7-jackson-datatype-jdk8-0:2.9.9-1.redhat_00001.1.el6eap
eap7-jackson-datatype-jsr310-0:2.9.9-1.redhat_00001.1.el6eap
eap7-jackson-jaxrs-base-0:2.9.9-2.redhat_00001.1.el6eap
eap7-jackson-jaxrs-json-provider-0:2.9.9-2.redhat_00001.1.el6eap
eap7-jackson-module-jaxb-annotations-0:2.9.9-1.redhat_00001.1.el6eap
eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el6eap
eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el6eap
eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el6eap
eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el6eap
eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el6eap
eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el6eap
eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el6eap
eap7-jboss-marshalling-river-0:2.0.9-1.Final_redhat_00001.1.el6eap
eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el6eap
eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el6eap
eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-cli-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-core-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-eap6.4-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-eap7.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-eap7.1-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly10.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly10.1-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly11.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly12.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly8.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly9.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el6eap
eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el6eap
eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-compensations-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-jbosstxbridge-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-jbossxts-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-jts-idlj-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-jts-integration-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-api-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-bridge-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-integration-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-util-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-narayana-txframework-0:5.9.6-1.Final_redhat_00001.1.el6eap
eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el6eap
eap7-netty-all-0:4.1.34-2.Final_redhat_00002.1.el6eap
eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el6eap
eap7-picketbox-infinispan-0:5.0.3-5.Final_redhat_00004.1.el6eap
eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00007.1.el6eap
eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el6eap
eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el6eap
eap7-weld-core-impl-0:3.0.6-2.Final_redhat_00002.1.el6eap
eap7-weld-core-jsf-0:3.0.6-2.Final_redhat_00002.1.el6eap
eap7-weld-ejb-0:3.0.6-2.Final_redhat_00002.1.el6eap
eap7-weld-jta-0:3.0.6-2.Final_redhat_00002.1.el6eap
eap7-weld-probe-core-0:3.0.6-2.Final_redhat_00002.1.el6eap
eap7-weld-web-0:3.0.6-2.Final_redhat_00002.1.el6eap
eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el6eap
eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el6eap
eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el6eap
eap7-wildfly-javadocs-0:7.2.4-1.GA_redhat_00002.1.el6eap
eap7-wildfly-modules-0:7.2.4-1.GA_redhat_00002.1.el6eap
eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el6eap
eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-cli-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-commons-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-core-client-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-dto-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-hornetq-protocol-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-hqclient-protocol-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-jdbc-store-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-jms-client-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-jms-server-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-journal-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-ra-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-selector-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-server-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-service-extensions-0:2.9.0-1.redhat_00005.1.el7eap
eap7-activemq-artemis-tools-0:2.9.0-1.redhat_00005.1.el7eap
eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el7eap
eap7-codehaus-jackson-core-asl-0:1.9.13-9.redhat_00006.1.el7eap
eap7-codehaus-jackson-jaxrs-0:1.9.13-9.redhat_00006.1.el7eap
eap7-codehaus-jackson-mapper-asl-0:1.9.13-9.redhat_00006.1.el7eap
eap7-codehaus-jackson-xc-0:1.9.13-9.redhat_00006.1.el7eap
eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el7eap
eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el7eap
eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el7eap
eap7-hibernate-core-0:5.3.11-2.SP1_redhat_00001.1.el7eap
eap7-hibernate-entitymanager-0:5.3.11-2.SP1_redhat_00001.1.el7eap
eap7-hibernate-envers-0:5.3.11-2.SP1_redhat_00001.1.el7eap
eap7-hibernate-java8-0:5.3.11-2.SP1_redhat_00001.1.el7eap
eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-cachestore-jdbc-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-cachestore-remote-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-client-hotrod-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-commons-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-core-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-hibernate-cache-commons-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-hibernate-cache-spi-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-infinispan-hibernate-cache-v53-0:9.3.7-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator-0:1.4.17-1.Final_redhat_00001.1.el7eap
eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el7eap
eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el7eap
eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el7eap
eap7-jackson-datatype-jdk8-0:2.9.9-1.redhat_00001.1.el7eap
eap7-jackson-datatype-jsr310-0:2.9.9-1.redhat_00001.1.el7eap
eap7-jackson-jaxrs-base-0:2.9.9-2.redhat_00001.1.el7eap
eap7-jackson-jaxrs-json-provider-0:2.9.9-2.redhat_00001.1.el7eap
eap7-jackson-module-jaxb-annotations-0:2.9.9-1.redhat_00001.1.el7eap
eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el7eap
eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el7eap
eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el7eap
eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el7eap
eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el7eap
eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling-river-0:2.0.9-1.Final_redhat_00001.1.el7eap
eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el7eap
eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el7eap
eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-cli-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-core-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-eap6.4-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-eap7.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-eap7.1-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly10.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly10.1-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly11.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly12.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly8.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly9.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el7eap
eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el7eap
eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-compensations-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-jbosstxbridge-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-jbossxts-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-jts-idlj-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-jts-integration-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-restat-api-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-restat-bridge-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-restat-integration-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-restat-util-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-narayana-txframework-0:5.9.6-1.Final_redhat_00001.1.el7eap
eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el7eap
eap7-netty-all-0:4.1.34-2.Final_redhat_00002.1.el7eap
eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el7eap
eap7-picketbox-infinispan-0:5.0.3-5.Final_redhat_00004.1.el7eap
eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00007.1.el7eap
eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el7eap
eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el7eap
eap7-weld-core-impl-0:3.0.6-2.Final_redhat_00002.1.el7eap
eap7-weld-core-jsf-0:3.0.6-2.Final_redhat_00002.1.el7eap
eap7-weld-ejb-0:3.0.6-2.Final_redhat_00002.1.el7eap
eap7-weld-jta-0:3.0.6-2.Final_redhat_00002.1.el7eap
eap7-weld-probe-core-0:3.0.6-2.Final_redhat_00002.1.el7eap
eap7-weld-web-0:3.0.6-2.Final_redhat_00002.1.el7eap
eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el7eap
eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el7eap
eap7-wildfly-java-jdk11-0:7.2.4-1.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8-0:7.2.4-1.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs-0:7.2.4-1.GA_redhat_00002.1.el7eap
eap7-wildfly-modules-0:7.2.4-1.GA_redhat_00002.1.el7eap
eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el7eap
eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-cli-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-commons-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-core-client-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-dto-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-hornetq-protocol-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-hqclient-protocol-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-jdbc-store-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-jms-client-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-jms-server-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-journal-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-ra-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-selector-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-server-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-service-extensions-0:2.9.0-1.redhat_00005.1.el8eap
eap7-activemq-artemis-tools-0:2.9.0-1.redhat_00005.1.el8eap
eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el8eap
eap7-codehaus-jackson-core-asl-0:1.9.13-9.redhat_00006.1.el8eap
eap7-codehaus-jackson-jaxrs-0:1.9.13-9.redhat_00006.1.el8eap
eap7-codehaus-jackson-mapper-asl-0:1.9.13-9.redhat_00006.1.el8eap
eap7-codehaus-jackson-xc-0:1.9.13-9.redhat_00006.1.el8eap
eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el8eap
eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el8eap
eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el8eap
eap7-hibernate-core-0:5.3.11-2.SP1_redhat_00001.1.el8eap
eap7-hibernate-entitymanager-0:5.3.11-2.SP1_redhat_00001.1.el8eap
eap7-hibernate-envers-0:5.3.11-2.SP1_redhat_00001.1.el8eap
eap7-hibernate-java8-0:5.3.11-2.SP1_redhat_00001.1.el8eap
eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-cachestore-jdbc-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-cachestore-remote-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-client-hotrod-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-commons-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-core-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-hibernate-cache-commons-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-hibernate-cache-spi-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-infinispan-hibernate-cache-v53-0:9.3.7-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator-0:1.4.17-1.Final_redhat_00001.1.el8eap
eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el8eap
eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el8eap
eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el8eap
eap7-jackson-datatype-jdk8-0:2.9.9-1.redhat_00001.1.el8eap
eap7-jackson-datatype-jsr310-0:2.9.9-1.redhat_00001.1.el8eap
eap7-jackson-jaxrs-base-0:2.9.9-2.redhat_00001.1.el8eap
eap7-jackson-jaxrs-json-provider-0:2.9.9-2.redhat_00001.1.el8eap
eap7-jackson-module-jaxb-annotations-0:2.9.9-1.redhat_00001.1.el8eap
eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el8eap
eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el8eap
eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el8eap
eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el8eap
eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el8eap
eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el8eap
eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el8eap
eap7-jboss-marshalling-river-0:2.0.9-1.Final_redhat_00001.1.el8eap
eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el8eap
eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el8eap
eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-cli-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-core-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-eap6.4-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-eap7.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-eap7.1-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly10.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly10.1-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly11.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly12.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly8.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly9.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el8eap
eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el8eap
eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-compensations-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-jbosstxbridge-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-jbossxts-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-jts-idlj-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-jts-integration-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-restat-api-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-restat-bridge-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-restat-integration-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-restat-util-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-narayana-txframework-0:5.9.6-1.Final_redhat_00001.1.el8eap
eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el8eap
eap7-netty-all-0:4.1.34-2.Final_redhat_00002.1.el8eap
eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el8eap
eap7-picketbox-infinispan-0:5.0.3-5.Final_redhat_00004.1.el8eap
eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00007.1.el8eap
eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el8eap
eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el8eap
eap7-weld-core-impl-0:3.0.6-2.Final_redhat_00002.1.el8eap
eap7-weld-core-jsf-0:3.0.6-2.Final_redhat_00002.1.el8eap
eap7-weld-ejb-0:3.0.6-2.Final_redhat_00002.1.el8eap
eap7-weld-jta-0:3.0.6-2.Final_redhat_00002.1.el8eap
eap7-weld-probe-core-0:3.0.6-2.Final_redhat_00002.1.el8eap
eap7-weld-web-0:3.0.6-2.Final_redhat_00002.1.el8eap
eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el8eap
eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el8eap
eap7-wildfly-javadocs-0:7.2.4-1.GA_redhat_00002.1.el8eap
eap7-wildfly-modules-0:7.2.4-1.GA_redhat_00002.1.el8eap
eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el8eap

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Nessus

Redhat

References