Skip to content
OpenAdvisories
Unscored RHSA-2014:1287 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.1 update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 106

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 glassfish-jaxb-eap6 0:2.2.5-22.redhat_9.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 glassfish-jsf-eap6 0:2.1.28-5.redhat_6.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hibernate4-core-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hibernate4-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hibernate4-entitymanager-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hibernate4-envers-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hibernate4-infinispan-eap6 0:4.2.14-8.SP3_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hibernate4-validator 0:4.3.2-1.Final_redhat_1.2.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hornetq 0:2.3.21-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpclient-eap6 0:4.2.6-4.redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpcomponents-client-eap6 0:4.2.6-4.redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpcomponents-core-eap6 0:4.2.5-4.redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpcomponents-eap6 0:7-4.redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpcomponents-project-eap6 0:7-4.redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpcore-eap6 0:4.2.5-4.redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpmime-eap6 0:4.2.6-4.redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-common-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-common-impl-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-common-spi-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-core-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-core-impl-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-deployers-common-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-jdbc-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-spec-api-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 ironjacamar-validator-eap6 0:1.0.27-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-appclient 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-cli 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-client-all 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-clustering 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-cmp 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-configadmin 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-connector 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-console 0:2.2.10-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-controller-client 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-core-security 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-deployment-repository 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-deployment-scanner 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-domain-http 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-domain-management 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ee 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ee-deployment 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ejb3 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-embedded 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-host-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jacorb 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jaxr 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jaxrs 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jdr 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jmx 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jpa 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jsf 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jsr77 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-logging 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-mail 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-management-client-content 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-messaging 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-modcluster 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-naming 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-network 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi-configadmin 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi-service 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-picketlink 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-platform-mbean 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-pojo 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-process-controller 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-protocol 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-remoting 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-sar 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-security 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-server 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-system-jmx 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-threads 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-transactions 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-version 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-web 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-webservices 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-weld 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-xts 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-ejb-client 0:1.0.26-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-hal 0:2.2.10-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-jaxws-api_2.2_spec 0:2.0.2-6.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-jms-api_1.1_spec 0:1.0.1-12.Final_redhat_2.2.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-marshalling 0:1.4.8-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-modules 0:1.3.4-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-remote-naming 0:1.0.9-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-remoting3 0:3.3.3-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-saaj-api_1.3_spec 0:1.0.3-6.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-security-negotiation 0:2.3.4-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-appclient 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-bundles 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-core 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-domain 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-javadocs 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-modules-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-product-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-standalone 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-welcome-content-eap 0:7.4.1-2.Final_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossts 1:4.17.22-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossweb 0:7.4.9-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossxb2 0:2.0.3-14.GA_redhat_2.2.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 resteasy 0:2.3.8-8.SP2_redhat_3.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 wss4j 0:1.6.15-2.redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 xml-security 0:1.5.6-2.redhat_1.1.ep6.el7

Vulnerabilities 1

  • Medium —
    CVE-2014-3558

    Improper Authentication in Hibernate Validator

    ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls vi…

    libhibernate-validator-java org.hibernate:hibernate-validator Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1120495
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128668
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1128714
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129665
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129682
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131102
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131837
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131983
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131988
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132041
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1132813
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1134669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1136934
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1136937
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1287.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3558
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3558
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3558