Skip to content
OpenAdvisories
Critical RHSA-2016:1432 2 CVEs

Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-ec2-eap 0:7.5.9-2.Final_redhat_2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-ec2-eap-samples 0:7.5.9-2.Final_redhat_2.ep6.el6

Vulnerabilities 2

  • Critical 9.8
    CVE-2016-2141

    Improper Input Validation in JGroups

    It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the …

    org.jgroups:jgroups libjgroups-java libjgroups-java Debian Ubuntu Maven
  • Medium 4.3
    CVE-2015-5174 EPSS 13%

    Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

    Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash d…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
  • article
    https://access.redhat.com/articles/2360521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265698
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1313589
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1432.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5174
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5174
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5174
  • article
    http://seclists.org/bugtraq/2016/Feb/149
  • report
    https://access.redhat.com/security/cve/CVE-2016-2141
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2141
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2141