Skip to content
OpenAdvisories
Unscored RHSA-2014:0799 5 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update

Published Sep 15, 2024 · Updated May 15, 2026

Ecosystem: Red Hat

Fixed packages 77

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 apache-cxf 0:2.7.11-3.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-core-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-entitymanager-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-envers-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-infinispan-eap6 0:4.2.7-9.SP5_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-aesh 0:0.33.12-1.redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-appclient 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cli 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-client-all 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-clustering 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cmp 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-configadmin 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-connector 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller-client 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-core-security 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-repository 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-scanner 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-http 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-management 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee-deployment 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ejb3 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-embedded 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-host-controller 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jacorb 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxr 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxrs 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jdr 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jmx 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jpa 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsf 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsr77 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-logging 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-mail 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-management-client-content 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-messaging 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-modcluster 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-naming 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-network 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-configadmin 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-service 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-platform-mbean 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-pojo 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-process-controller 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-protocol 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-remoting 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-sar 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-security 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-server 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-system-jmx 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-threads 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-transactions 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-version 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-web 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-webservices 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-weld 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-xts 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-security-negotiation 0:2.2.10-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-xnio-base 0:3.0.10-1.GA_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-appclient 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-bundles 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-core 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-domain 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-javadocs 0:7.3.4-1.Final_redhat_1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-modules-eap 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-product-eap 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-standalone 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-welcome-content-eap 0:7.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossts 1:4.17.15-5.Final_redhat_5.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossweb 0:7.3.2-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 picketbox 0:4.0.19-8.SP8_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 resteasy 0:2.3.7.2-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 weld-core 0:1.1.17-4.SP3_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 wss4j 0:1.6.15-1.redhat_1.1.ep6.el6

Vulnerabilities 5

  • Medium —
    CVE-2014-0034

    Improper Input Validation in Apache CXF

    The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

    org.apache.cxf:cxf-rt-ws-security Maven
  • Medium —
    CVE-2014-0035

    Cleartext Transmission of Sensitive Information in Apache CXF

    The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtai…

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0109

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error.

    org.apache.cxf:cxf-core Maven
  • Medium —
    CVE-2014-0110

    Uncontrolled Resource Consumption in Apache CXF

    Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message.

    org.apache.cxf:cxf-core Maven
  • Unscored —
    CVE-2014-3481

    org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/JBoss_Enterprise_Application_Platform/6.2/html-single/6.2.4_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1090472
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093526
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093527
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093529
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1093530
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1103769
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1103872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104166
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1105242
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1105591
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1105657
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106545
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106579
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106585
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1106589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1109953
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0799.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0034
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0034
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0034
  • report
    https://access.redhat.com/security/cve/CVE-2014-0035
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0035
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0035
  • report
    https://access.redhat.com/security/cve/CVE-2014-0109
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0109
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0109
  • report
    https://access.redhat.com/security/cve/CVE-2014-0110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0110
  • report
    https://access.redhat.com/security/cve/CVE-2014-3481
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3481
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3481