Skip to content
OpenAdvisories
Medium RHSA-2019:1419 3 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.2 on RHEL 6 security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 107

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-commons-codec 0:1.11.0-2.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf 0:3.2.7-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf-rt 0:3.2.7-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf-services 0:3.2.7-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf-tools 0:3.2.7-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hal-console 0:3.0.11-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate 0:5.3.10-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-core 0:5.3.10-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-entitymanager 0:5.3.10-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-envers 0:5.3.10-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-java8 0:5.3.10-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hornetq 0:2.4.7-7.Final_redhat_2.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hornetq-commons 0:2.4.7-7.Final_redhat_2.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hornetq-core-client 0:2.4.7-7.Final_redhat_2.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hornetq-jms-client 0:2.4.7-7.Final_redhat_2.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-common-api 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-common-impl 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-common-spi 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-core-api 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-core-impl 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-deployers-common 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-jdbc 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ironjacamar-validator 0:1.4.16-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-javassist 0:3.23.2-2.GA_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-ejb-client 0:4.0.18-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-marshalling 0:2.0.7-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-marshalling-river 0:2.0.7-2.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-modules 0:1.8.8-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-openjdk-orb 0:8.1.3-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-remoting 0:5.0.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-cli 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-core 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap6.4 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap6.4-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.0 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.0-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.1 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.1-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.0 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.0-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.1 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.1-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly11.0 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly11.0-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly12.0 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly12.0-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly13.0-server 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly14.0-server 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly8.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly8.2-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly9.0 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly9.0-to-eap7.2 0:1.3.1-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-xnio-base 0:3.6.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jgroups 0:4.0.19-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-api 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-bindings 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-common 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-config 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-federation 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-idm-api 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-idm-impl 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-idm-simple-schema 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-impl 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketlink-wildfly8 0:2.5.5-17.SP12_redhat_00005.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-atom-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-cdi 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-client 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-client-microprofile 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-crypto 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jackson-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jackson2-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jaxb-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jaxrs 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jettison-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jose-jwt 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jsapi 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-json-binding-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-json-p-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-multipart-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-rxjava2 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-spring 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-validator-provider-11 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-yaml-provider 0:3.6.1-5.SP5_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-undertow 0:2.0.20-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-core 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-core-impl 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-core-jsf 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-ejb 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-jta 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-probe-core 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-web 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly 0:7.2.2-2.GA_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-common 0:1.5.1-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-discovery 0:1.1.2-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-discovery-client 0:1.1.2-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-client 0:1.0.15-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-client-common 0:1.0.15-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-ejb-client 0:1.0.15-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-naming-client 0:1.0.15-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-transaction-client 0:1.0.15-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-javadocs 0:7.2.2-2.GA_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-modules 0:7.2.2-2.GA_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-naming-client 0:1.0.10-1.Final_redhat_00001.1.el6eap

Vulnerabilities 3

  • Medium 6.4
    CVE-2019-3873

    It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude paramet…

    Red Hat picketlink
  • Medium 5.4
    CVE-2019-3872

    It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Applicat…

    Red Hat picketlink
  • Medium 5.3
    CVE-2019-3888

    Credential exposure through log files in Undertow

    A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER…

    Red Hat undertow undertow undertow Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1688966
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1689014
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1693777
  • article
    https://issues.redhat.com/browse/JBEAP-16124
  • article
    https://issues.redhat.com/browse/JBEAP-16139
  • article
    https://issues.redhat.com/browse/JBEAP-16360
  • article
    https://issues.redhat.com/browse/JBEAP-16362
  • article
    https://issues.redhat.com/browse/JBEAP-16370
  • article
    https://issues.redhat.com/browse/JBEAP-16453
  • article
    https://issues.redhat.com/browse/JBEAP-16457
  • article
    https://issues.redhat.com/browse/JBEAP-16470
  • article
    https://issues.redhat.com/browse/JBEAP-16471
  • article
    https://issues.redhat.com/browse/JBEAP-16473
  • article
    https://issues.redhat.com/browse/JBEAP-16580
  • article
    https://issues.redhat.com/browse/JBEAP-16622
  • article
    https://issues.redhat.com/browse/JBEAP-16632
  • article
    https://issues.redhat.com/browse/JBEAP-16633
  • article
    https://issues.redhat.com/browse/JBEAP-16670
  • article
    https://issues.redhat.com/browse/JBEAP-16709
  • article
    https://issues.redhat.com/browse/JBEAP-16717
  • article
    https://issues.redhat.com/browse/JBEAP-16720
  • article
    https://issues.redhat.com/browse/JBEAP-16781
  • article
    https://issues.redhat.com/browse/JBEAP-16860
  • article
    https://issues.redhat.com/browse/JBEAP-16881
  • article
    https://issues.redhat.com/browse/JBEAP-16882
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1419.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-3872
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-3872
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-3872
  • report
    https://access.redhat.com/security/cve/CVE-2019-3873
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-3873
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-3873
  • report
    https://access.redhat.com/security/cve/CVE-2019-3888
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-3888
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-3888