Skip to content
OpenAdvisories
High RHSA-2017:0244 4 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 75

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 apache-cxf 0:2.7.18-5.SP4_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hornetq 0:2.3.25-18.SP16_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan 0:5.2.20-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-cachestore-jdbc 0:5.2.20-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-cachestore-remote 0:5.2.20-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-client-hotrod 0:5.2.20-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-core 0:5.2.20-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-appclient 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cli 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-client-all 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-clustering 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cmp 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-configadmin 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-connector 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-console 0:2.5.15-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller-client 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-core-security 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-repository 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-scanner 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-http 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-management 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee-deployment 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ejb3 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-embedded 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-host-controller 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jacorb 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxr 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxrs 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jdr 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jmx 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jpa 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsf 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsr77 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-logging 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-mail 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-management-client-content 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-messaging 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-modcluster 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-naming 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-network 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-configadmin 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-service 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-picketlink 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-platform-mbean 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-pojo 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-process-controller 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-protocol 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-remoting 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-sar 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-security 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-server 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-system-jmx 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-threads 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-transactions 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-version 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-web 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-webservices 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-weld 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-xts 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-ejb-client 0:1.0.38-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-hal 0:2.5.15-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-appclient 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-bundles 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-core 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-domain 0:7.5.13-5.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-javadocs 0:7.5.13-3.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-modules-eap 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-product-eap 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-standalone 0:7.5.13-5.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-welcome-content-eap 0:7.5.13-2.Final_redhat_2.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossweb 0:7.5.20-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 resteasy 0:2.3.16-1.Final_redhat_1.1.ep6.el6

Vulnerabilities 4

  • High 7.1
    CVE-2016-6816 Public exploit EPSS 40%

    Improper Input Validation in Apache Tomcat

    The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  • High 7.0
    CVE-2016-8656

    Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script…

    jboss jbossas
  • Medium 4.3
    CVE-2016-8627

    admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that al…

    [UNKNOWN] admin-cli
  • Low 3.5
    CVE-2016-7061

    An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discove…

    Red Hat EAP

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1380852
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388240
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1397484
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1401970
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1403850
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0244.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-6816
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-6816
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-6816
  • article
    https://access.redhat.com/articles/2991951
  • article
    https://access.redhat.com/solutions/2891171
  • article
    https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.48
  • article
    https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.73
  • article
    https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.39
  • article
    https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.8
  • report
    https://access.redhat.com/security/cve/CVE-2016-7061
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-7061
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-7061
  • report
    https://access.redhat.com/security/cve/CVE-2016-8627
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8627
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8627
  • report
    https://access.redhat.com/security/cve/CVE-2016-8656
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8656
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8656