Skip to content
OpenAdvisories
Unscored RHSA-2014:1285 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.1 update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 116

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 glassfish-jaxb-eap6 0:2.2.5-22.redhat_9.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 glassfish-jsf-eap6 0:2.1.28-5.redhat_6.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-core-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-entitymanager-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-envers-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-infinispan-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-validator 0:4.3.2-1.Final_redhat_1.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hornetq 0:2.3.21-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpclient-eap6 0:4.2.6-4.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpcomponents-client-eap6 0:4.2.6-4.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpcomponents-core-eap6 0:4.2.5-4.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpcomponents-eap6 0:7-4.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpcomponents-project-eap6 0:7-4.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpcore-eap6 0:4.2.5-4.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpmime-eap6 0:4.2.6-4.redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-impl-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-spi-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-core-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-core-impl-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-deployers-common-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-jdbc-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-spec-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-validator-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-annotations-api_1.1_spec 0:1.0.1-4.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-appclient 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cli 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-client-all 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-clustering 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cmp 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-configadmin 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-connector 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-console 0:2.2.10-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller-client 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-core-security 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-repository 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-scanner 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-http 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-management 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee-deployment 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ejb3 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-embedded 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-host-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jacorb 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxr 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxrs 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jdr 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jmx 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jpa 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsf 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsr77 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-logging 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-mail 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-management-client-content 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-messaging 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-modcluster 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-naming 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-network 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-configadmin 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-service 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-picketlink 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-platform-mbean 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-pojo 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-process-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-protocol 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-remoting 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-sar 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-security 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-server 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-system-jmx 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-threads 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-transactions 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-version 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-web 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-webservices 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-weld 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-xts 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-connector-api_1.6_spec 0:1.0.1-4.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-ejb-client 0:1.0.26-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-hal 0:2.2.10-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-interceptors-api_1.1_spec 0:1.0.1-5.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-jaxr-api_1.0_spec 0:1.0.2-5.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-jaxrs-api_1.1_spec 0:1.0.1-9.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-jaxws-api_2.2_spec 0:2.0.2-6.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-jms-api_1.1_spec 0:1.0.1-12.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-jsp-api_2.2_spec 0:1.0.1-7.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-marshalling 0:1.4.8-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-modules 0:1.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-remote-naming 0:1.0.9-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-remoting3 0:3.3.3-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-saaj-api_1.3_spec 0:1.0.3-6.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-security-negotiation 0:2.3.4-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-transaction-api_1.1_spec 0:1.0.1-12.Final_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-appclient 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-bundles 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-core 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-domain 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-javadocs 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-modules-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-product-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-standalone 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-welcome-content-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossts 1:4.17.22-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossweb 0:7.4.9-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossxb2 0:2.0.3-14.GA_redhat_2.2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 netty 0:3.6.9-2.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 picketlink-bindings 0:2.5.3-9.SP10_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 picketlink-federation 0:2.5.3-10.SP10_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 resteasy 0:2.3.8-8.SP2_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 wss4j 0:1.6.15-2.redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 xml-security 0:1.5.6-2.redhat_1.1.ep6.el6

Vulnerabilities 1

  • Medium —
    CVE-2014-3558

    Improper Authentication in Hibernate Validator

    ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls vi…

    libhibernate-validator-java org.hibernate:hibernate-validator Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1120495
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128666
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129663
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129680
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131100
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131835
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131981
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132009
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132032
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132039
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132811
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1134667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1136932
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1136935
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1285.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3558
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3558
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3558