Skip to content
OpenAdvisories
Critical RHSA-2024:11529 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update

Published Dec 20, 2024 · Updated Sep 15, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el7 eap7-hornetq 0:2.4.11-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el7 eap7-hornetq-commons 0:2.4.11-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el7 eap7-hornetq-core-client 0:2.4.11-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el7 eap7-hornetq-jms-client 0:2.4.11-1.Final_redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hornetq 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hornetq-commons 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hornetq-core-client 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hornetq-jms-client 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el9 eap7-hornetq 0:2.4.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el9 eap7-hornetq-commons 0:2.4.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el9 eap7-hornetq-core-client 0:2.4.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el9 eap7-hornetq-jms-client 0:2.4.11-1.Final_redhat_00001.1.el9eap

Vulnerabilities 1

  • Critical 9.1
    CVE-2024-51127

    hornetq vulnerable to file overwrite, sensitive information disclosure

    An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.

    org.hornetq:hornetq-core-client Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2323697
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11529.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-51127
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-51127
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-51127
  • article
    http://hornetq.com
  • article
    https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md