Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.1 security update on RHEL 8

Fixed packages 12

Vulnerabilities 10

• High 8.8
  CVE-2020-13936 EPSS 23%

  Velocity Sandbox Bypass

  An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/mod…

  Apache Software Foundation Apache Velocity Engine org.apache.velocity:velocity velocity Debian Ubuntu Maven
  Mar 10, 2021
• High 7.5
  CVE-2021-3690

  Undertow vulnerable to memory exhaustion due to buffer leak

  A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Aug 23, 2022
• Medium 6.5
  CVE-2021-29425 Public exploit EPSS 11%

  Possible limited path traversal vulnerabily in Apache Commons IO

  In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not furth…

  Apache Software Foundation Apache Commons IO druid commons-io:commons-io Debian Ubuntu Wolfi Maven
  Apr 13, 2021
• Medium 5.9
  CVE-2021-21295 EPSS 19%

  Possible request smuggling in HTTP/2 due missing validation

  Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that…

  netty io.netty:netty-codec-http2 netty netty Debian Ubuntu Maven
  Mar 9, 2021
• Medium 5.9
  CVE-2021-21409

  Possible request smuggling in HTTP/2 due missing validation of content-length

  Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that…

  netty netty netty netty Debian Ubuntu Maven
  Mar 30, 2021
• Medium 5.9
  CVE-2021-3597

  undertow Race Condition vulnerability

  A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1…

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  May 24, 2022
• Medium 5.3
  CVE-2021-28170

  Improper Input Validation in Jakarta Expression Language

  In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

  The Eclipse Foundation Jakarta Expression Language Implementation org.glassfish:javax.el jakarta-el-api Debian Ubuntu Maven
  May 26, 2021
• Medium 5.3
  CVE-2021-3642

  Observable Discrepancy in Wildfly Elytron

  A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.

  org.wildfly.security:wildfly-elytron Maven
  Aug 5, 2021
• Low 3.8
  CVE-2021-3536

  Cross-site Scripting in Wildfly

  A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.

  org.wildfly:wildfly-parent Maven
  May 20, 2021
• Low 3.3
  CVE-2021-3644

  wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault

  A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should no…

  org.wildfly.core:wildfly-server Maven
  Aug 26, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1937364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1937440
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1944888
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1948001
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1948752
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1965497
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1970930
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1976052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1981407
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1991299
• article
  https://issues.redhat.com/browse/JBEAP-18402
• article
  https://issues.redhat.com/browse/JBEAP-21231
• article
  https://issues.redhat.com/browse/JBEAP-21257
• article
  https://issues.redhat.com/browse/JBEAP-21258
• article
  https://issues.redhat.com/browse/JBEAP-21261
• article
  https://issues.redhat.com/browse/JBEAP-21263
• article
  https://issues.redhat.com/browse/JBEAP-21270
• article
  https://issues.redhat.com/browse/JBEAP-21276
• article
  https://issues.redhat.com/browse/JBEAP-21277
• article
  https://issues.redhat.com/browse/JBEAP-21281
• article
  https://issues.redhat.com/browse/JBEAP-21300
• article
  https://issues.redhat.com/browse/JBEAP-21309
• article
  https://issues.redhat.com/browse/JBEAP-21313
• article
  https://issues.redhat.com/browse/JBEAP-21472
• article
  https://issues.redhat.com/browse/JBEAP-21569
• article
  https://issues.redhat.com/browse/JBEAP-21777
• article
  https://issues.redhat.com/browse/JBEAP-21781
• article
  https://issues.redhat.com/browse/JBEAP-21818
• article
  https://issues.redhat.com/browse/JBEAP-21961
• article
  https://issues.redhat.com/browse/JBEAP-21978
• article
  https://issues.redhat.com/browse/JBEAP-22009
• article
  https://issues.redhat.com/browse/JBEAP-22084
• article
  https://issues.redhat.com/browse/JBEAP-22088
• article
  https://issues.redhat.com/browse/JBEAP-22160
• article
  https://issues.redhat.com/browse/JBEAP-22209
• article
  https://issues.redhat.com/browse/JBEAP-22318