Skip to content
OpenAdvisories
Medium RHSA-2020:3142 3 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2 security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-ejb-client 0:4.0.33-2.SP1_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly 0:7.2.8-6.GA_redhat_00003.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-client 0:1.0.21-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-client-common 0:1.0.21-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-ejb-client 0:1.0.21-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-naming-client 0:1.0.21-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-http-transaction-client 0:1.0.21-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-javadocs 0:7.2.8-6.GA_redhat_00003.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-modules 0:7.2.8-6.GA_redhat_00003.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-naming-client 0:1.0.13-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-jboss-ejb-client 0:4.0.33-2.SP1_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly 0:7.2.8-6.GA_redhat_00003.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-http-client 0:1.0.21-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-http-client-common 0:1.0.21-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-http-ejb-client 0:1.0.21-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-http-naming-client 0:1.0.21-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-http-transaction-client 0:1.0.21-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-java-jdk11 0:7.2.8-6.GA_redhat_00003.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-java-jdk8 0:7.2.8-6.GA_redhat_00003.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-javadocs 0:7.2.8-6.GA_redhat_00003.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-modules 0:7.2.8-6.GA_redhat_00003.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el7 eap7-wildfly-naming-client 0:1.0.13-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-jboss-ejb-client 0:4.0.33-2.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly 0:7.2.8-6.GA_redhat_00003.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-http-client 0:1.0.21-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-http-client-common 0:1.0.21-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-http-ejb-client 0:1.0.21-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-http-naming-client 0:1.0.21-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-http-transaction-client 0:1.0.21-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-javadocs 0:7.2.8-6.GA_redhat_00003.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-modules 0:7.2.8-6.GA_redhat_00003.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el8 eap7-wildfly-naming-client 0:1.0.13-1.Final_redhat_00001.1.el8eap

Vulnerabilities 3

  • Medium 6.6
    CVE-2020-10740

    Wildfly Unsafe Deserialization Vulnerability

    A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

    [UNKNOWN] wildfly org.wildfly:wildfly-parent Maven
  • Medium 6.5
    CVE-2020-14297

    Wildfly EJB Client causes DoS

    A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and…

    Red Hat wildfly org.jboss:jboss-ejb-client Maven
  • Medium 6.5
    CVE-2020-14307

    A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where Ses…

    Red Hat wildfly

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1834512
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1851327
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1853595
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3142.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10740
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10740
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10740
  • report
    https://access.redhat.com/security/cve/CVE-2020-14297
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14297
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14297
  • report
    https://access.redhat.com/security/cve/CVE-2020-14307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14307
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14307