Skip to content
OpenAdvisories
Unscored RHSA-2008:0832 2 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP02 security update

Published Sep 29, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 glassfish-jaf 0:1.1.0-0jpp.ep1.12.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 glassfish-javamail 0:1.4.0-0jpp.ep1.10.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 glassfish-jaxb 0:2.1.4-1jpp.ep1.4.el5.2
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 glassfish-jaxws 0:2.1.1-1jpp.ep1.3.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 glassfish-jstl 0:1.2.0-0jpp.ep1.10.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3-annotations 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3-annotations-javadoc 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3-commons-annotations 0:0.0.0-1.1jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3-entitymanager 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3-entitymanager-javadoc 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3-javadoc 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 hibernate3-validator 0:0.0.0-1.1jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 javassist 0:3.8.0-1jpp.ep1.2.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-aop 0:1.5.5-2.CP02.0jpp.ep1.2.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-jaxr 0:1.2.0-SP1.0jpp.ep1.4.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-messaging 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-remoting 0:2.2.2-3.SP9.0jpp.ep1.2.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-seam 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jboss-seam-docs 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossas 0:4.3.0-2.GA_CP02.ep1.10.el5.2
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossts 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossweb 0:2.0.0-4.CP06.0jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossws 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossws-common 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossws-framework 0:2.0.1-0jpp.ep1.11.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 jbossxb 0:1.0.0-2.SP3.0jpp.ep1.3.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el5 rh-eap-docs 0:4.3.0-2.GA_CP02.ep1.6.el5

Vulnerabilities 2

  • Medium —
    CVE-2007-5342

    JULI logging component in Apache Tomcat does not restrict certain permissions for web applications

    The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite a…

    org.apache.tomcat:tomcat-juli Maven
  • Unscored —
    CVE-2008-3519

    The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EA…

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=427216
  • article
    http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp02/html-single/readme/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458823
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0832.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-5342
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5342
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5342
  • report
    https://access.redhat.com/security/cve/CVE-2008-3519
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3519
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3519