Skip to content
OpenAdvisories
High RHSA-2020:2063 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2 security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 30

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-glassfish-jsf 0:2.3.5-11.SP3_redhat_00009.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-cachestore-jdbc 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-cachestore-remote 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-client-hotrod 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-commons 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-core 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-hibernate-cache-commons 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-hibernate-cache-spi 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-infinispan-hibernate-cache-v53 0:9.3.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-glassfish-jsf 0:2.3.5-11.SP3_redhat_00009.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-cachestore-jdbc 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-cachestore-remote 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-client-hotrod 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-commons 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-core 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-hibernate-cache-commons 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-hibernate-cache-spi 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-infinispan-hibernate-cache-v53 0:9.3.9-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-glassfish-jsf 0:2.3.5-11.SP3_redhat_00009.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-cachestore-jdbc 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-cachestore-remote 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-client-hotrod 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-commons 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-core 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-hibernate-cache-commons 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-hibernate-cache-spi 0:9.3.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-infinispan-hibernate-cache-v53 0:9.3.9-1.Final_redhat_00001.1.el8eap

Vulnerabilities 2

  • High 7.5
    CVE-2018-14371

    Path Traversal in Eclipse Mojarra

    The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

    mojarra org.glassfish:mojarra-parent Ubuntu Maven
  • High 7.5
    CVE-2019-10174

    Use of Externally-Controlled Input to Select Classes or Code in Infinispan

    A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce n…

    [UNKNOWN] infinispan org.infinispan:infinispan-core Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1703469
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2063.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-14371
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-14371
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-14371
  • report
    https://access.redhat.com/security/cve/CVE-2019-10174
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10174
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10174