Skip to content
OpenAdvisories
Critical RHSA-2018:1248 3 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6

Published Sep 13, 2024 · Updated Aug 9, 2026

Ecosystem: Red Hat

Fixed packages 87

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-cli 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-commons 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-core-client 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-dto 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hornetq-protocol 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hqclient-protocol 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jdbc-store 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-client 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-server 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-journal 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-native 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-ra 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-selector 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-server 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-service-extensions 0:1.5.5.010-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate 0:5.1.13-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-core 0:5.1.13-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-entitymanager 0:5.1.13-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-envers 0:5.1.13-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-infinispan 0:5.1.13-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-java8 0:5.1.13-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan 0:8.2.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-cachestore-jdbc 0:8.2.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-cachestore-remote 0:8.2.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-client-hotrod 0:8.2.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-commons 0:8.2.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-core 0:8.2.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-api 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-impl 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-spi 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-core-api 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-core-impl 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-deployers-common 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-jdbc 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-validator 0:1.4.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-ejb-client 0:4.0.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-jsf-api_2.2_spec 0:2.2.13-5.SP2_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-marshalling 0:2.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-marshalling-river 0:2.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-cli 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-core 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap6.4 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap6.4-to-eap7.0 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap6.4-to-eap7.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap7.0 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap7.0-to-eap7.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap7.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.0 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.0-to-eap7.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.1-to-eap7.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly8.2 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly8.2-to-eap7.0 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly8.2-to-eap7.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly9.0 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly9.0-to-eap7.0 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly9.0-to-eap7.1 0:1.0.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-weld-2.2-api 0:2.4.0-3.SP2_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-xnio-base 0:3.5.5-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jgroups 0:3.6.14-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-mod_cluster 0:1.3.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketbox 0:5.0.3-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketbox-infinispan 0:5.0.3-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-api 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-bindings 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-common 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-config 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-federation 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-api 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-impl 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-simple-schema 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-impl 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-wildfly8 0:2.5.5-11.SP10_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-undertow 0:1.4.18-5.SP5_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-weld-core 0:2.4.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-weld-core-impl 0:2.4.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-weld-core-jsf 0:2.4.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-weld-probe-core 0:2.4.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly 0:7.1.2-1.GA_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-elytron 0:1.1.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-elytron-tool 0:1.0.6-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-javadocs 0:7.1.2-1.GA_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-modules 0:7.1.2-1.GA_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-web-console-eap 0:2.9.16-2.Final_redhat_1.2.ep7.el6

Vulnerabilities 3

  • Critical 9.8
    CVE-2018-8088 EPSS 15%

    Improper Access Control in SLF4J

    org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 late…

    org.slf4j:slf4j-ext libslf4j-java Debian Maven
  • Medium 5.5
    CVE-2018-1047 Public exploit

    Improper Input Validation in org.wildfly:wildfly-undertow

    A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

    Red Hat wildfly undertow org.wildfly:wildfly-undertow Ubuntu Maven
  • Medium 5.4
    CVE-2018-1067

    Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow

    In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and vali…

    [UNKNOWN] undertow undertow undertow Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1528361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1548909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1550671
  • article
    https://issues.redhat.com/browse/JBEAP-14135
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1248.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1047
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1047
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1047
  • report
    https://access.redhat.com/security/cve/CVE-2018-1067
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1067
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1067
  • report
    https://access.redhat.com/security/cve/CVE-2018-8088
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-8088
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-8088