Skip to content
OpenAdvisories
Unscored RHSA-2014:0798 5 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update

Published Sep 15, 2024 · Updated May 15, 2026

Ecosystem: Red Hat

Fixed packages 77

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 apache-cxf 0:2.7.11-3.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-core-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-entitymanager-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-envers-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-infinispan-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-aesh 0:0.33.12-1.redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-appclient 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-cli 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-client-all 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-clustering 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-cmp 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-configadmin 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-connector 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-controller 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-controller-client 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-core-security 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-deployment-repository 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-deployment-scanner 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-domain-http 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-domain-management 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-ee 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-ee-deployment 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-ejb3 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-embedded 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-host-controller 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jacorb 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jaxr 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jaxrs 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jdr 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jmx 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jpa 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jsf 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jsr77 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-logging 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-mail 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-management-client-content 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-messaging 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-modcluster 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-naming 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-network 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-osgi 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-osgi-configadmin 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-osgi-service 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-platform-mbean 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-pojo 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-process-controller 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-protocol 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-remoting 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-sar 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-security 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-server 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-system-jmx 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-threads 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-transactions 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-version 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-web 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-webservices 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-weld 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-xts 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-security-negotiation 0:2.2.10-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-xnio-base 0:3.0.10-1.GA_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-appclient 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-bundles 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-core 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-domain 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-javadocs 0:7.3.4-1.Final_redhat_1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-modules-eap 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-product-eap 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-standalone 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-welcome-content-eap 0:7.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossts 1:4.17.15-5.Final_redhat_5.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossweb 0:7.3.2-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 picketbox 0:4.0.19-8.SP8_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 resteasy 0:2.3.7.2-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 weld-core 0:1.1.17-4.SP3_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 wss4j 0:1.6.15-1.redhat_1.1.ep6.el5

Vulnerabilities 5

  • Medium —
    CVE-2014-0034

    Improper Input Validation in Apache CXF

    The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

    org.apache.cxf:cxf-rt-ws-security Maven
  • Medium —
    CVE-2014-0035

    Cleartext Transmission of Sensitive Information in Apache CXF

    The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtai…

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0109

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0110

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

    org.apache.cxf:cxf-core Maven
  • Unscored —
    CVE-2014-3481

    org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/JBoss_Enterprise_Application_Platform/6.2/html-single/6.2.4_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1090473
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093526
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093527
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093529
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093530
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1103767
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1103873
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1105242
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1105592
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1105658
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106546
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106586
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106590
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1109954
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0798.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0034
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0034
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0034
  • report
    https://access.redhat.com/security/cve/CVE-2014-0035
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0035
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0035
  • report
    https://access.redhat.com/security/cve/CVE-2014-0109
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0109
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0109
  • report
    https://access.redhat.com/security/cve/CVE-2014-0110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0110
  • report
    https://access.redhat.com/security/cve/CVE-2014-3481
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3481
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3481