Skip to content
OpenAdvisories
Critical RHSA-2022:8917 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update

Published Sep 30, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-native 0:1.2.31-11.redhat_11.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-native-debuginfo 0:1.2.31-11.redhat_11.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-native 0:1.2.31-11.redhat_11.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-native-debuginfo 0:1.2.31-11.redhat_11.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-native 0:1.2.31-11.redhat_11.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-native-debuginfo 0:1.2.31-11.redhat_11.el9jws

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-1292 Public exploit EPSS 83%

    The c_rehash script allows command injection

    The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2022-2068 EPSS 96%

    The c_rehash script allows command injection

    In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081494
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2097310
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8917.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-1292
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-1292
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-1292
  • article
    https://www.openssl.org/news/secadv/20220503.txt
  • report
    https://access.redhat.com/security/cve/CVE-2022-2068
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-2068
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-2068
  • article
    https://www.openssl.org/news/secadv/20220621.txt