Skip to content
OpenAdvisories
Unscored RHSA-2014:1286 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.1 update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 116

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 glassfish-jaxb-eap6 0:2.2.5-22.redhat_9.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 glassfish-jsf-eap6 0:2.1.28-5.redhat_6.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-core-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-entitymanager-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-envers-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-infinispan-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hibernate4-validator 0:4.3.2-1.Final_redhat_1.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 hornetq 0:2.3.21-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 httpclient-eap6 0:4.2.6-4.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 httpcomponents-client-eap6 0:4.2.6-4.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 httpcomponents-core-eap6 0:4.2.5-4.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 httpcomponents-eap6 0:7-4.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 httpcomponents-project-eap6 0:7-4.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 httpcore-eap6 0:4.2.5-4.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 httpmime-eap6 0:4.2.6-4.redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-common-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-common-impl-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-common-spi-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-core-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-core-impl-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-deployers-common-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-jdbc-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-spec-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 ironjacamar-validator-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-annotations-api_1.1_spec 0:1.0.1-4.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-appclient 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-cli 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-client-all 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-clustering 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-cmp 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-configadmin 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-connector 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-console 0:2.2.10-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-controller-client 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-core-security 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-deployment-repository 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-deployment-scanner 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-domain-http 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-domain-management 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-ee 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-ee-deployment 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-ejb3 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-embedded 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-host-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jacorb 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jaxr 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jaxrs 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jdr 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jmx 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jpa 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jsf 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-jsr77 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-logging 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-mail 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-management-client-content 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-messaging 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-modcluster 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-naming 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-network 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-osgi 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-osgi-configadmin 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-osgi-service 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-picketlink 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-platform-mbean 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-pojo 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-process-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-protocol 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-remoting 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-sar 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-security 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-server 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-system-jmx 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-threads 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-transactions 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-version 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-web 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-webservices 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-weld 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-as-xts 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-connector-api_1.6_spec 0:1.0.1-4.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-ejb-client 0:1.0.26-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-hal 0:2.2.10-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-interceptors-api_1.1_spec 0:1.0.1-5.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-jaxr-api_1.0_spec 0:1.0.2-5.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-jaxrs-api_1.1_spec 0:1.0.1-9.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-jaxws-api_2.2_spec 0:2.0.2-6.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-jms-api_1.1_spec 0:1.0.1-12.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-jsp-api_2.2_spec 0:1.0.1-7.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-marshalling 0:1.4.8-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-modules 0:1.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-remote-naming 0:1.0.9-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-remoting3 0:3.3.3-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-saaj-api_1.3_spec 0:1.0.3-6.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-security-negotiation 0:2.3.4-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jboss-transaction-api_1.1_spec 0:1.0.1-12.Final_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-appclient 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-bundles 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-core 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-domain 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-javadocs 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-modules-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-product-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-standalone 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossas-welcome-content-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossts 1:4.17.22-2.Final_redhat_2.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossweb 0:7.4.9-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jbossxb2 0:2.0.3-14.GA_redhat_2.2.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 netty 0:3.6.9-2.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 picketlink-bindings 0:2.5.3-9.SP10_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 picketlink-federation 0:2.5.3-10.SP10_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 resteasy 0:2.3.8-8.SP2_redhat_3.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 wss4j 0:1.6.15-2.redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 xml-security 0:1.5.6-2.redhat_1.1.ep6.el5

Vulnerabilities 1

  • Medium —
    CVE-2014-3558

    Improper Authentication in Hibernate Validator

    ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls vi…

    libhibernate-validator-java org.hibernate:hibernate-validator Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1120495
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129664
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131101
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131982
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132010
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132034
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132040
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132812
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1134668
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1136933
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1136936
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1286.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3558
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3558
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3558