Skip to content
OpenAdvisories
High RHSA-2017:1260 1 CVE

Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-ec2-eap 0:7.5.15-3.Final_redhat_3.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-ec2-eap-samples 0:7.5.15-3.Final_redhat_3.ep6.el6

Vulnerabilities 1

  • High 8.1
    CVE-2016-9606

    JBoss RESTEasy vulnerable to Improper Input Validation

    JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.

    Red Hat RESTEasy resteasy resteasy3.0 Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400644
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1260.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9606
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9606
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9606