Vulnerabilities > CVE-2019-12814 - Deserialization of Untrusted Data vulnerability in multiple products

047910
CVSS 5.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
high complexity
fasterxml
debian
CWE-502
nessus

Summary

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.

Vulnerable Configurations

Part Description Count
Application
Fasterxml
124
OS
Debian
1

Common Weakness Enumeration (CWE)

Nessus

  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2019-2936.NASL
    descriptionAn update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release of Red Hat JBoss Enterprise Application Platform 7.2.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.3, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es) : * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files (CVE-2019-10212) * codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities (CVE-2019-10202) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)
    last seen2020-06-01
    modified2020-06-02
    plugin id129517
    published2019-10-02
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129517
    titleRHEL 7 : JBoss EAP (RHSA-2019:2936)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2019:2936. The text 
    # itself is copyright (C) Red Hat, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(129517);
      script_version("1.4");
      script_cvs_date("Date: 2019/12/23");
    
      script_cve_id("CVE-2019-10184", "CVE-2019-10202", "CVE-2019-10212", "CVE-2019-12086", "CVE-2019-12384", "CVE-2019-12814", "CVE-2019-14379");
      script_xref(name:"RHSA", value:"2019:2936");
    
      script_name(english:"RHEL 7 : JBoss EAP (RHSA-2019:2936)");
      script_summary(english:"Checks the rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Red Hat host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "An update is now available for Red Hat JBoss Enterprise Application
    Platform 7.2 for Red Hat Enterprise Linux 7.
    
    Red Hat Product Security has rated this update as having a security
    impact of Important. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    This release of Red Hat JBoss Enterprise Application Platform 7.2.4
    serves as a replacement for Red Hat JBoss Enterprise Application
    Platform 7.2.3, and includes bug fixes and enhancements. See the Red
    Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for
    information about the most significant bug fixes and enhancements
    included in this release.
    
    Security Fix(es) :
    
    * jackson-databind: default typing mishandling leading to remote code
    execution (CVE-2019-14379)
    
    * jackson-databind: failure to block the logback-core class from
    polymorphic deserialization leading to remote code execution
    (CVE-2019-12384)
    
    * jackson-databind: polymorphic typing issue allows attacker to read
    arbitrary local files on the server via crafted JSON message
    (CVE-2019-12814)
    
    * undertow: DEBUG log for io.undertow.request.security if enabled
    leaks credentials to log files (CVE-2019-10212)
    
    * codehaus: incomplete fix for unsafe deserialization in
    jackson-databind vulnerabilities (CVE-2019-10202)
    
    * jackson-databind: polymorphic typing issue allows attacker to read
    arbitrary local files on the server (CVE-2019-12086)
    
    * undertow: Information leak in requests for directories without
    trailing slashes (CVE-2019-10184)"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/documentation/en-us/"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/errata/RHSA-2019:2936"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-10184"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-10202"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-10212"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-12086"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-12384"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-12814"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-14379"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-cli");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-commons");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-core-client");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-dto");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-hornetq-protocol");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-hqclient-protocol");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-jdbc-store");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-jms-client");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-jms-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-journal");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-ra");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-selector");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-service-extensions");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-activemq-artemis-tools");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-core-asl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-jaxrs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-mapper-asl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-codehaus-jackson-xc");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-glassfish-jsf");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hal-console");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-core");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-entitymanager");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-envers");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-hibernate-java8");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-cachestore-jdbc");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-cachestore-remote");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-client-hotrod");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-commons");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-core");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-hibernate-cache-commons");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-hibernate-cache-spi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-infinispan-hibernate-cache-v53");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-common-api");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-common-impl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-common-spi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-core-api");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-core-impl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-deployers-common");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-jdbc");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-ironjacamar-validator");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-annotations");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-core");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-databind");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-datatype-jdk8");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-datatype-jsr310");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-jaxrs-base");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-jaxrs-json-provider");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-module-jaxb-annotations");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-modules-base");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jackson-modules-java8");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-ejb-client");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-jaxrs-api_2.1_spec");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-logging");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-logmanager");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-marshalling");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-marshalling-river");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-msc");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-remoting");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-cli");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-core");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap6.4");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap6.4-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.0-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.1");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.1-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.0-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.1");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly10.1-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly11.0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly11.0-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly12.0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly12.0-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly13.0-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly14.0-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly8.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly8.2-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly9.0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-server-migration-wildfly9.0-to-eap7.2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jboss-xnio-base");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-jgroups");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-compensations");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jbosstxbridge");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jbossxts");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jts-idlj");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-jts-integration");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-api");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-bridge");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-integration");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-restat-util");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-narayana-txframework");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-netty");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-netty-all");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketbox");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketbox-infinispan");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-api");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-bindings");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-common");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-config");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-federation");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-idm-api");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-idm-impl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-idm-simple-schema");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-impl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-picketlink-wildfly8");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-undertow");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-core");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-core-impl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-core-jsf");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-ejb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-jta");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-probe-core");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-weld-web");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-elytron");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-elytron-tool");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-java-jdk11");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-java-jdk8");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-javadocs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-modules");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:eap7-wildfly-transaction-client");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/17");
      script_set_attribute(attribute:"patch_publication_date", value:"2019/09/30");
      script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/02");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Red Hat Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
    os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
    os_ver = os_ver[1];
    if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 7.x", "Red Hat " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
    
    yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
    if (!empty_or_null(yum_updateinfo)) 
    {
      rhsa = "RHSA-2019:2936";
      yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
      if (!empty_or_null(yum_report))
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : yum_report 
        );
        exit(0);
      }
      else
      {
        audit_message = "affected by Red Hat security advisory " + rhsa;
        audit(AUDIT_OS_NOT, audit_message);
      }
    }
    else
    {
      flag = 0;
    
      if (! (rpm_exists(release:"RHEL7", rpm:"eap7-jboss"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, "JBoss EAP");
    
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-cli-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-commons-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-core-client-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-dto-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-hornetq-protocol-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-hqclient-protocol-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-jdbc-store-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-jms-client-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-jms-server-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-journal-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-ra-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-selector-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-server-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-service-extensions-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-activemq-artemis-tools-2.9.0-1.redhat_00005.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-1.9.13-9.redhat_00006.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-core-asl-1.9.13-9.redhat_00006.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-jaxrs-1.9.13-9.redhat_00006.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-mapper-asl-1.9.13-9.redhat_00006.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-codehaus-jackson-xc-1.9.13-9.redhat_00006.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-glassfish-jsf-2.3.5-4.SP3_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-hal-console-3.0.16-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-5.3.11-2.SP1_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-core-5.3.11-2.SP1_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-entitymanager-5.3.11-2.SP1_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-envers-5.3.11-2.SP1_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-hibernate-java8-5.3.11-2.SP1_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-cachestore-jdbc-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-cachestore-remote-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-client-hotrod-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-commons-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-core-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-hibernate-cache-commons-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-hibernate-cache-spi-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-infinispan-hibernate-cache-v53-9.3.7-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-common-api-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-common-impl-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-common-spi-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-core-api-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-core-impl-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-deployers-common-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-jdbc-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-ironjacamar-validator-1.4.17-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-annotations-2.9.9-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-core-2.9.9-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-databind-2.9.9.3-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-datatype-jdk8-2.9.9-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-datatype-jsr310-2.9.9-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-jaxrs-base-2.9.9-2.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-jaxrs-json-provider-2.9.9-2.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-module-jaxb-annotations-2.9.9-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-modules-base-2.9.9-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jackson-modules-java8-2.9.9-1.redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-ejb-client-4.0.23-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-jaxrs-api_2.1_spec-1.0.3-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-logging-3.3.3-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-logmanager-2.1.14-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-marshalling-2.0.9-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-marshalling-river-2.0.9-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-msc-1.4.8-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-remoting-5.0.14-1.SP1_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-cli-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-core-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap6.4-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap6.4-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.1-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.1-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.1-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly10.1-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly11.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly11.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly12.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly12.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly13.0-server-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly14.0-server-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly8.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly8.2-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly9.0-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-server-migration-wildfly9.0-to-eap7.2-1.3.1-4.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jboss-xnio-base-3.7.3-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-jgroups-4.0.20-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-compensations-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jbosstxbridge-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jbossxts-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jts-idlj-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-jts-integration-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-api-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-bridge-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-integration-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-restat-util-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-narayana-txframework-5.9.6-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-netty-4.1.34-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-netty-all-4.1.34-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketbox-5.0.3-5.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketbox-infinispan-5.0.3-5.Final_redhat_00004.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-api-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-bindings-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-common-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-config-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-federation-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-idm-api-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-idm-impl-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-idm-simple-schema-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-impl-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-picketlink-wildfly8-2.5.5-20.SP12_redhat_00007.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-undertow-2.0.25-1.SP1_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-weld-core-3.0.6-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-weld-core-impl-3.0.6-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-weld-core-jsf-3.0.6-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-weld-ejb-3.0.6-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-weld-jta-3.0.6-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-weld-probe-core-3.0.6-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-weld-web-3.0.6-2.Final_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-7.2.4-1.GA_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-elytron-1.6.4-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-elytron-tool-1.4.3-1.Final_redhat_00001.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-java-jdk11-7.2.4-1.GA_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-java-jdk8-7.2.4-1.GA_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-javadocs-7.2.4-1.GA_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-modules-7.2.4-1.GA_redhat_00002.1.el7")) flag++;
      if (rpm_check(release:"RHEL7", reference:"eap7-wildfly-transaction-client-1.1.6-2.Final_redhat_00001.1.el7")) flag++;
    
      if (flag)
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : rpm_report_get() + redhat_report_package_caveat()
        );
        exit(0);
      }
      else
      {
        tested = pkg_tests_get();
        if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
        else audit(AUDIT_PACKAGE_NOT_INSTALLED, "eap7-activemq-artemis / eap7-activemq-artemis-cli / etc");
      }
    }
    
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2019-3046.NASL
    descriptionNew Red Hat Single Sign-On 7.3.4 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.3.4 on RHEL 8 serves as a replacement for Red Hat Single Sign-On 7.3.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Security Fix(es) : * keycloak: cross-realm user access auth bypass (CVE-2019-14832) * keycloak: adapter endpoints are exposed via arbitrary URLs (CVE-2019-14820) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id129865
    published2019-10-15
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129865
    titleRHEL 8 : Red Hat Single Sign-On 7.3.4 (RHSA-2019:3046)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2019:3046. The text 
    # itself is copyright (C) Red Hat, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(129865);
      script_version("1.4");
      script_cvs_date("Date: 2019/12/19");
    
      script_cve_id("CVE-2019-10184", "CVE-2019-12086", "CVE-2019-12814", "CVE-2019-14379", "CVE-2019-14820", "CVE-2019-14832");
      script_xref(name:"RHSA", value:"2019:3046");
    
      script_name(english:"RHEL 8 : Red Hat Single Sign-On 7.3.4 (RHSA-2019:3046)");
      script_summary(english:"Checks the rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Red Hat host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "New Red Hat Single Sign-On 7.3.4 packages are now available for Red
    Hat Enterprise Linux 8.
    
    Red Hat Product Security has rated this update as having a security
    impact of Important. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    Red Hat Single Sign-On 7.3 is a standalone server, based on the
    Keycloak project, that provides authentication and standards-based
    single sign-on capabilities for web and mobile applications.
    
    This release of Red Hat Single Sign-On 7.3.4 on RHEL 8 serves as a
    replacement for Red Hat Single Sign-On 7.3.3, and includes bug fixes
    and enhancements, which are documented in the Release Notes document
    linked to in the References.
    
    Security Fix(es) :
    
    * keycloak: cross-realm user access auth bypass (CVE-2019-14832)
    
    * keycloak: adapter endpoints are exposed via arbitrary URLs
    (CVE-2019-14820)
    
    * jackson-databind: polymorphic typing issue allows attacker to read
    arbitrary local files on the server via crafted JSON message
    (CVE-2019-12814)
    
    * jackson-databind: default typing mishandling leading to remote code
    execution (CVE-2019-14379)
    
    * jackson-databind: polymorphic typing issue allows attacker to read
    arbitrary local files on the server (CVE-2019-12086)
    
    * undertow: Information leak in requests for directories without
    trailing slashes (CVE-2019-10184)
    
    For more details about the security issue(s), including the impact, a
    CVSS score, and other related information, refer to the CVE page(s)
    listed in the References section."
      );
      # https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.3/
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?93d4a9a3"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/errata/RHSA-2019:3046"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-10184"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-12086"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-12814"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-14379"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-14820"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-14832"
      );
      script_set_attribute(
        attribute:"solution", 
        value:
    "Update the affected rh-sso7-keycloak and / or rh-sso7-keycloak-server
    packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rh-sso7-keycloak");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rh-sso7-keycloak-server");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/17");
      script_set_attribute(attribute:"patch_publication_date", value:"2019/10/14");
      script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/15");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Red Hat Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
    os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
    os_ver = os_ver[1];
    if (! preg(pattern:"^8([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 8.x", "Red Hat " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
    
    yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
    if (!empty_or_null(yum_updateinfo)) 
    {
      rhsa = "RHSA-2019:3046";
      yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
      if (!empty_or_null(yum_report))
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : yum_report 
        );
        exit(0);
      }
      else
      {
        audit_message = "affected by Red Hat security advisory " + rhsa;
        audit(AUDIT_OS_NOT, audit_message);
      }
    }
    else
    {
      flag = 0;
      if (rpm_check(release:"RHEL8", reference:"rh-sso7-keycloak-4.8.13-1.Final_redhat_00001.1.el8sso")) flag++;
      if (rpm_check(release:"RHEL8", reference:"rh-sso7-keycloak-server-4.8.13-1.Final_redhat_00001.1.el8sso")) flag++;
    
      if (flag)
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : rpm_report_get() + redhat_report_package_caveat()
        );
        exit(0);
      }
      else
      {
        tested = pkg_tests_get();
        if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
        else audit(AUDIT_PACKAGE_NOT_INSTALLED, "rh-sso7-keycloak / rh-sso7-keycloak-server");
      }
    }
    
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2019-3045.NASL
    descriptionNew Red Hat Single Sign-On 7.3.4 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.3.4 on RHEL 7 serves as a replacement for Red Hat Single Sign-On 7.3.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Security Fix(es) : * keycloak: cross-realm user access auth bypass (CVE-2019-14832) * keycloak: adapter endpoints are exposed via arbitrary URLs (CVE-2019-14820) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id129864
    published2019-10-15
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129864
    titleRHEL 7 : Red Hat Single Sign-On 7.3.4 (RHSA-2019:3045)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2019:3045. The text 
    # itself is copyright (C) Red Hat, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(129864);
      script_version("1.4");
      script_cvs_date("Date: 2019/12/19");
    
      script_cve_id("CVE-2019-10184", "CVE-2019-12086", "CVE-2019-12814", "CVE-2019-14379", "CVE-2019-14820", "CVE-2019-14832");
      script_xref(name:"RHSA", value:"2019:3045");
    
      script_name(english:"RHEL 7 : Red Hat Single Sign-On 7.3.4 (RHSA-2019:3045)");
      script_summary(english:"Checks the rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Red Hat host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "New Red Hat Single Sign-On 7.3.4 packages are now available for Red
    Hat Enterprise Linux 7.
    
    Red Hat Product Security has rated this update as having a security
    impact of Important. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    Red Hat Single Sign-On 7.3 is a standalone server, based on the
    Keycloak project, that provides authentication and standards-based
    single sign-on capabilities for web and mobile applications.
    
    This release of Red Hat Single Sign-On 7.3.4 on RHEL 7 serves as a
    replacement for Red Hat Single Sign-On 7.3.3, and includes bug fixes
    and enhancements, which are documented in the Release Notes document
    linked to in the References.
    
    Security Fix(es) :
    
    * keycloak: cross-realm user access auth bypass (CVE-2019-14832)
    
    * keycloak: adapter endpoints are exposed via arbitrary URLs
    (CVE-2019-14820)
    
    * jackson-databind: polymorphic typing issue allows attacker to read
    arbitrary local files on the server via crafted JSON message
    (CVE-2019-12814)
    
    * jackson-databind: default typing mishandling leading to remote code
    execution (CVE-2019-14379)
    
    * jackson-databind: polymorphic typing issue allows attacker to read
    arbitrary local files on the server (CVE-2019-12086)
    
    * undertow: Information leak in requests for directories without
    trailing slashes (CVE-2019-10184)
    
    For more details about the security issue(s), including the impact, a
    CVSS score, and other related information, refer to the CVE page(s)
    listed in the References section."
      );
      # https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.3/
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?93d4a9a3"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/errata/RHSA-2019:3045"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-10184"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-12086"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-12814"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-14379"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-14820"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2019-14832"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rh-sso7-keycloak");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rh-sso7-keycloak-server");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rh-sso7-libunix-dbus-java");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rh-sso7-libunix-dbus-java-debuginfo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rh-sso7-libunix-dbus-java-devel");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/17");
      script_set_attribute(attribute:"patch_publication_date", value:"2019/10/14");
      script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/15");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Red Hat Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
    os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
    os_ver = os_ver[1];
    if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 7.x", "Red Hat " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
    
    yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
    if (!empty_or_null(yum_updateinfo)) 
    {
      rhsa = "RHSA-2019:3045";
      yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
      if (!empty_or_null(yum_report))
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : yum_report 
        );
        exit(0);
      }
      else
      {
        audit_message = "affected by Red Hat security advisory " + rhsa;
        audit(AUDIT_OS_NOT, audit_message);
      }
    }
    else
    {
      flag = 0;
      if (rpm_check(release:"RHEL7", reference:"rh-sso7-keycloak-4.8.13-1.Final_redhat_00001.1.el7sso")) flag++;
      if (rpm_check(release:"RHEL7", reference:"rh-sso7-keycloak-server-4.8.13-1.Final_redhat_00001.1.el7sso")) flag++;
      if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"rh-sso7-libunix-dbus-java-0.8.0-2.el7sso")) flag++;
      if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"rh-sso7-libunix-dbus-java-debuginfo-0.8.0-2.el7sso")) flag++;
      if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"rh-sso7-libunix-dbus-java-devel-0.8.0-2.el7sso")) flag++;
    
      if (flag)
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : rpm_report_get() + redhat_report_package_caveat()
        );
        exit(0);
      }
      else
      {
        tested = pkg_tests_get();
        if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
        else audit(AUDIT_PACKAGE_NOT_INSTALLED, "rh-sso7-keycloak / rh-sso7-keycloak-server / etc");
      }
    }
    
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2019-99FF6AA32C.NASL
    description - Update jackson-databind to version 2.9.9.3. - Update jackson-core to version 2.9.9. - Update jackson-annotations to version 2.9.9. - Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id129634
    published2019-10-07
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129634
    titleFedora 31 : jackson-annotations / jackson-bom / jackson-core / jackson-databind (2019-99ff6aa32c)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2019-2935.NASL
    descriptionAn update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release of Red Hat JBoss Enterprise Application Platform 7.2.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.3, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es) : * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files (CVE-2019-10212) * codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities (CVE-2019-10202) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)
    last seen2020-06-01
    modified2020-06-02
    plugin id129516
    published2019-10-02
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129516
    titleRHEL 6 : JBoss EAP (RHSA-2019:2935)
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2019-FB23ECCC03.NASL
    description - Update jackson-databind to version 2.9.9.3. - Update jackson-core to version 2.9.9. - Update jackson-annotations to version 2.9.9. - Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id129113
    published2019-09-23
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129113
    titleFedora 29 : jackson-annotations / jackson-bom / jackson-core / jackson-databind (2019-fb23eccc03)
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DLA-1831.NASL
    descriptionMore Polymorphic Typing issues were discovered in jackson-databind. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x or logback-core jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server. For Debian 8
    last seen2020-06-01
    modified2020-06-02
    plugin id126126
    published2019-06-24
    reporterThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/126126
    titleDebian DLA-1831-1 : jackson-databind security update
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2019-2937.NASL
    descriptionAn update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release of Red Hat JBoss Enterprise Application Platform 7.2.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.3, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.4 Release Notes for information about the most significant bug fixes and enhancements included in this release. Security Fix(es) : * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files (CVE-2019-10212) * codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities (CVE-2019-10202) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)
    last seen2020-06-01
    modified2020-06-02
    plugin id129518
    published2019-10-02
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129518
    titleRHEL 8 : JBoss EAP (RHSA-2019:2937)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2019-3044.NASL
    descriptionNew Red Hat Single Sign-On 7.3.4 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.3.4 on RHEL 6 serves as a replacement for Red Hat Single Sign-On 7.3.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Security Fix(es) : * keycloak: cross-realm user access auth bypass (CVE-2019-14832) * keycloak: adapter endpoints are exposed via arbitrary URLs (CVE-2019-14820) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message (CVE-2019-12814) * jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379) * jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server (CVE-2019-12086) * undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id129863
    published2019-10-15
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129863
    titleRHEL 6 : Red Hat Single Sign-On 7.3.4 (RHSA-2019:3044)
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2019-AE6A703B8F.NASL
    description - Update jackson-databind to version 2.9.9.3. - Update jackson-core to version 2.9.9. - Update jackson-annotations to version 2.9.9. - Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id129110
    published2019-09-23
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/129110
    titleFedora 30 : jackson-annotations / jackson-bom / jackson-core / jackson-databind (2019-ae6a703b8f)

Redhat

advisories
  • rhsa
    idRHSA-2019:2858
  • rhsa
    idRHSA-2019:2935
  • rhsa
    idRHSA-2019:2936
  • rhsa
    idRHSA-2019:2937
  • rhsa
    idRHSA-2019:2938
  • rhsa
    idRHSA-2019:3044
  • rhsa
    idRHSA-2019:3045
  • rhsa
    idRHSA-2019:3046
  • rhsa
    idRHSA-2019:3050
  • rhsa
    idRHSA-2019:3149
  • rhsa
    idRHSA-2019:3200
  • rhsa
    idRHSA-2019:3292
  • rhsa
    idRHSA-2019:3297
rpms
  • eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-cli-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-commons-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-core-client-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-dto-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-hornetq-protocol-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-hqclient-protocol-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-jdbc-store-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-jms-client-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-jms-server-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-journal-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-ra-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-selector-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-server-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-service-extensions-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-activemq-artemis-tools-0:2.9.0-1.redhat_00005.1.el6eap
  • eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el6eap
  • eap7-codehaus-jackson-core-asl-0:1.9.13-9.redhat_00006.1.el6eap
  • eap7-codehaus-jackson-jaxrs-0:1.9.13-9.redhat_00006.1.el6eap
  • eap7-codehaus-jackson-mapper-asl-0:1.9.13-9.redhat_00006.1.el6eap
  • eap7-codehaus-jackson-xc-0:1.9.13-9.redhat_00006.1.el6eap
  • eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el6eap
  • eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el6eap
  • eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el6eap
  • eap7-hibernate-core-0:5.3.11-2.SP1_redhat_00001.1.el6eap
  • eap7-hibernate-entitymanager-0:5.3.11-2.SP1_redhat_00001.1.el6eap
  • eap7-hibernate-envers-0:5.3.11-2.SP1_redhat_00001.1.el6eap
  • eap7-hibernate-java8-0:5.3.11-2.SP1_redhat_00001.1.el6eap
  • eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-cachestore-jdbc-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-cachestore-remote-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-client-hotrod-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-commons-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-core-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-hibernate-cache-commons-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-hibernate-cache-spi-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-hibernate-cache-v53-0:9.3.7-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-common-api-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-common-impl-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-common-spi-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-core-api-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-core-impl-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-deployers-common-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-jdbc-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-validator-0:1.4.17-1.Final_redhat_00001.1.el6eap
  • eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el6eap
  • eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el6eap
  • eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el6eap
  • eap7-jackson-datatype-jdk8-0:2.9.9-1.redhat_00001.1.el6eap
  • eap7-jackson-datatype-jsr310-0:2.9.9-1.redhat_00001.1.el6eap
  • eap7-jackson-jaxrs-base-0:2.9.9-2.redhat_00001.1.el6eap
  • eap7-jackson-jaxrs-json-provider-0:2.9.9-2.redhat_00001.1.el6eap
  • eap7-jackson-module-jaxb-annotations-0:2.9.9-1.redhat_00001.1.el6eap
  • eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el6eap
  • eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el6eap
  • eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-marshalling-river-0:2.0.9-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el6eap
  • eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-cli-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-core-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap6.4-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.1-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.1-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly11.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly12.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly8.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly9.0-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el6eap
  • eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el6eap
  • eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-compensations-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jbosstxbridge-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jbossxts-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jts-idlj-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jts-integration-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-api-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-bridge-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-integration-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-util-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-txframework-0:5.9.6-1.Final_redhat_00001.1.el6eap
  • eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el6eap
  • eap7-netty-all-0:4.1.34-2.Final_redhat_00002.1.el6eap
  • eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el6eap
  • eap7-picketbox-infinispan-0:5.0.3-5.Final_redhat_00004.1.el6eap
  • eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00007.1.el6eap
  • eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el6eap
  • eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el6eap
  • eap7-weld-core-impl-0:3.0.6-2.Final_redhat_00002.1.el6eap
  • eap7-weld-core-jsf-0:3.0.6-2.Final_redhat_00002.1.el6eap
  • eap7-weld-ejb-0:3.0.6-2.Final_redhat_00002.1.el6eap
  • eap7-weld-jta-0:3.0.6-2.Final_redhat_00002.1.el6eap
  • eap7-weld-probe-core-0:3.0.6-2.Final_redhat_00002.1.el6eap
  • eap7-weld-web-0:3.0.6-2.Final_redhat_00002.1.el6eap
  • eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el6eap
  • eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-javadocs-0:7.2.4-1.GA_redhat_00002.1.el6eap
  • eap7-wildfly-modules-0:7.2.4-1.GA_redhat_00002.1.el6eap
  • eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el6eap
  • eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-cli-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-commons-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-core-client-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-dto-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-hornetq-protocol-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-hqclient-protocol-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-jdbc-store-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-jms-client-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-jms-server-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-journal-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-ra-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-selector-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-server-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-service-extensions-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-activemq-artemis-tools-0:2.9.0-1.redhat_00005.1.el7eap
  • eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el7eap
  • eap7-codehaus-jackson-core-asl-0:1.9.13-9.redhat_00006.1.el7eap
  • eap7-codehaus-jackson-jaxrs-0:1.9.13-9.redhat_00006.1.el7eap
  • eap7-codehaus-jackson-mapper-asl-0:1.9.13-9.redhat_00006.1.el7eap
  • eap7-codehaus-jackson-xc-0:1.9.13-9.redhat_00006.1.el7eap
  • eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el7eap
  • eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el7eap
  • eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el7eap
  • eap7-hibernate-core-0:5.3.11-2.SP1_redhat_00001.1.el7eap
  • eap7-hibernate-entitymanager-0:5.3.11-2.SP1_redhat_00001.1.el7eap
  • eap7-hibernate-envers-0:5.3.11-2.SP1_redhat_00001.1.el7eap
  • eap7-hibernate-java8-0:5.3.11-2.SP1_redhat_00001.1.el7eap
  • eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-cachestore-jdbc-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-cachestore-remote-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-client-hotrod-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-commons-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-core-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-hibernate-cache-commons-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-hibernate-cache-spi-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-hibernate-cache-v53-0:9.3.7-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-common-api-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-common-impl-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-common-spi-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-core-api-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-core-impl-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-deployers-common-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-jdbc-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-validator-0:1.4.17-1.Final_redhat_00001.1.el7eap
  • eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el7eap
  • eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el7eap
  • eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el7eap
  • eap7-jackson-datatype-jdk8-0:2.9.9-1.redhat_00001.1.el7eap
  • eap7-jackson-datatype-jsr310-0:2.9.9-1.redhat_00001.1.el7eap
  • eap7-jackson-jaxrs-base-0:2.9.9-2.redhat_00001.1.el7eap
  • eap7-jackson-jaxrs-json-provider-0:2.9.9-2.redhat_00001.1.el7eap
  • eap7-jackson-module-jaxb-annotations-0:2.9.9-1.redhat_00001.1.el7eap
  • eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el7eap
  • eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el7eap
  • eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-marshalling-river-0:2.0.9-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el7eap
  • eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-cli-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-core-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap6.4-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.1-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.1-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly11.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly12.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly8.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly9.0-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el7eap
  • eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el7eap
  • eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-compensations-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jbosstxbridge-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jbossxts-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jts-idlj-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jts-integration-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-api-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-bridge-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-integration-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-util-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-txframework-0:5.9.6-1.Final_redhat_00001.1.el7eap
  • eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el7eap
  • eap7-netty-all-0:4.1.34-2.Final_redhat_00002.1.el7eap
  • eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el7eap
  • eap7-picketbox-infinispan-0:5.0.3-5.Final_redhat_00004.1.el7eap
  • eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00007.1.el7eap
  • eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el7eap
  • eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el7eap
  • eap7-weld-core-impl-0:3.0.6-2.Final_redhat_00002.1.el7eap
  • eap7-weld-core-jsf-0:3.0.6-2.Final_redhat_00002.1.el7eap
  • eap7-weld-ejb-0:3.0.6-2.Final_redhat_00002.1.el7eap
  • eap7-weld-jta-0:3.0.6-2.Final_redhat_00002.1.el7eap
  • eap7-weld-probe-core-0:3.0.6-2.Final_redhat_00002.1.el7eap
  • eap7-weld-web-0:3.0.6-2.Final_redhat_00002.1.el7eap
  • eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el7eap
  • eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-java-jdk11-0:7.2.4-1.GA_redhat_00002.1.el7eap
  • eap7-wildfly-java-jdk8-0:7.2.4-1.GA_redhat_00002.1.el7eap
  • eap7-wildfly-javadocs-0:7.2.4-1.GA_redhat_00002.1.el7eap
  • eap7-wildfly-modules-0:7.2.4-1.GA_redhat_00002.1.el7eap
  • eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el7eap
  • eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-cli-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-commons-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-core-client-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-dto-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-hornetq-protocol-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-hqclient-protocol-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-jdbc-store-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-jms-client-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-jms-server-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-journal-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-ra-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-selector-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-server-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-service-extensions-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-activemq-artemis-tools-0:2.9.0-1.redhat_00005.1.el8eap
  • eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el8eap
  • eap7-codehaus-jackson-core-asl-0:1.9.13-9.redhat_00006.1.el8eap
  • eap7-codehaus-jackson-jaxrs-0:1.9.13-9.redhat_00006.1.el8eap
  • eap7-codehaus-jackson-mapper-asl-0:1.9.13-9.redhat_00006.1.el8eap
  • eap7-codehaus-jackson-xc-0:1.9.13-9.redhat_00006.1.el8eap
  • eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el8eap
  • eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el8eap
  • eap7-hibernate-core-0:5.3.11-2.SP1_redhat_00001.1.el8eap
  • eap7-hibernate-entitymanager-0:5.3.11-2.SP1_redhat_00001.1.el8eap
  • eap7-hibernate-envers-0:5.3.11-2.SP1_redhat_00001.1.el8eap
  • eap7-hibernate-java8-0:5.3.11-2.SP1_redhat_00001.1.el8eap
  • eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-cachestore-jdbc-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-cachestore-remote-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-client-hotrod-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-commons-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-core-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-hibernate-cache-commons-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-hibernate-cache-spi-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-infinispan-hibernate-cache-v53-0:9.3.7-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-common-api-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-common-impl-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-common-spi-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-core-api-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-core-impl-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-deployers-common-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-jdbc-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-ironjacamar-validator-0:1.4.17-1.Final_redhat_00001.1.el8eap
  • eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el8eap
  • eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el8eap
  • eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el8eap
  • eap7-jackson-datatype-jdk8-0:2.9.9-1.redhat_00001.1.el8eap
  • eap7-jackson-datatype-jsr310-0:2.9.9-1.redhat_00001.1.el8eap
  • eap7-jackson-jaxrs-base-0:2.9.9-2.redhat_00001.1.el8eap
  • eap7-jackson-jaxrs-json-provider-0:2.9.9-2.redhat_00001.1.el8eap
  • eap7-jackson-module-jaxb-annotations-0:2.9.9-1.redhat_00001.1.el8eap
  • eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el8eap
  • eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el8eap
  • eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el8eap
  • eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el8eap
  • eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el8eap
  • eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el8eap
  • eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el8eap
  • eap7-jboss-marshalling-river-0:2.0.9-1.Final_redhat_00001.1.el8eap
  • eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el8eap
  • eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el8eap
  • eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-cli-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-core-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-eap6.4-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-eap7.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-eap7.1-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly10.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly10.1-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly11.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly12.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly13.0-server-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly14.0-server-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly8.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly9.0-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.1-4.Final_redhat_00004.1.el8eap
  • eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el8eap
  • eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-compensations-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-jbosstxbridge-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-jbossxts-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-jts-idlj-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-jts-integration-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-restat-api-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-restat-bridge-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-restat-integration-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-restat-util-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-narayana-txframework-0:5.9.6-1.Final_redhat_00001.1.el8eap
  • eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el8eap
  • eap7-netty-all-0:4.1.34-2.Final_redhat_00002.1.el8eap
  • eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el8eap
  • eap7-picketbox-infinispan-0:5.0.3-5.Final_redhat_00004.1.el8eap
  • eap7-picketlink-api-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-common-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-config-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-idm-api-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-idm-impl-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-idm-simple-schema-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-impl-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-picketlink-wildfly8-0:2.5.5-20.SP12_redhat_00007.1.el8eap
  • eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el8eap
  • eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el8eap
  • eap7-weld-core-impl-0:3.0.6-2.Final_redhat_00002.1.el8eap
  • eap7-weld-core-jsf-0:3.0.6-2.Final_redhat_00002.1.el8eap
  • eap7-weld-ejb-0:3.0.6-2.Final_redhat_00002.1.el8eap
  • eap7-weld-jta-0:3.0.6-2.Final_redhat_00002.1.el8eap
  • eap7-weld-probe-core-0:3.0.6-2.Final_redhat_00002.1.el8eap
  • eap7-weld-web-0:3.0.6-2.Final_redhat_00002.1.el8eap
  • eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el8eap
  • eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el8eap
  • eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el8eap
  • eap7-wildfly-javadocs-0:7.2.4-1.GA_redhat_00002.1.el8eap
  • eap7-wildfly-modules-0:7.2.4-1.GA_redhat_00002.1.el8eap
  • eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el8eap
  • rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso
  • rh-sso7-keycloak-server-0:4.8.13-1.Final_redhat_00001.1.el6sso
  • rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el7sso
  • rh-sso7-keycloak-server-0:4.8.13-1.Final_redhat_00001.1.el7sso
  • rh-sso7-libunix-dbus-java-0:0.8.0-2.el7sso
  • rh-sso7-libunix-dbus-java-debuginfo-0:0.8.0-2.el7sso
  • rh-sso7-libunix-dbus-java-devel-0:0.8.0-2.el7sso
  • rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso
  • rh-sso7-keycloak-server-0:4.8.13-1.Final_redhat_00001.1.el8sso

References