Skip to content
OpenAdvisories
High WID-SEC-2022-1912 12 CVEs

Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen

Published Aug 17, 2020 · Updated Feb 23, 2025 · Revision 19 · de-DE

Vendor: Hitachi Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: JBoss Enterprise Application Platform Product: Linux Product: Linux Product: Network Attached Storage Product: Ops Center Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Code zur Ausführung zu bringen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.

Product

JBoss Enterprise Application Platform ist eine skalierbare Plattform für Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.

Vulnerabilities 12

  • Critical 9.8
    CVE-2020-10683

    dom4j allows External Entities by default which might enable XXE attacks

    dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any applicatio…

    org.dom4j:dom4j dom4j:dom4j dom4j dom4j Debian Ubuntu Maven
  • High 8.8
    CVE-2020-10672

    jackson-databind mishandles the interaction between serialization gadgets and typing

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • High 8.8
    CVE-2020-10673 Public exploit

    jackson-databind mishandles the interaction between serialization gadgets and typing

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • High 7.5
    CVE-2020-10714

    Session Fixation in WildFly Elytron

    A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confid…

    org.wildfly.security:wildfly-elytron Maven
  • High 7.5
    CVE-2020-1748

    Incorrect Authorization in WildFly Elytron

    A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information expos…

    org.wildfly.security:wildfly-elytron Maven
  • Medium 6.6
    CVE-2020-10740

    Wildfly Unsafe Deserialization Vulnerability

    A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

    [UNKNOWN] wildfly org.wildfly:wildfly-parent Maven
  • Medium 6.5
    CVE-2019-14900 Public exploit

    SQL Injection in Hibernate ORM

    A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw c…

    org.hibernate:hibernate-core fuse Azure Linux Maven
  • Medium 6.5
    CVE-2020-14297

    Wildfly EJB Client causes DoS

    A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and…

    Red Hat wildfly org.jboss:jboss-ejb-client Maven
  • Medium 5.3
    CVE-2020-10693

    Improper Input Validation in Hibernate Validator

    A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) control…

    Hibernate hibernate-validator libhibernate-validator-java org.hibernate:hibernate-validator Debian Ubuntu Maven
  • Medium 4.8
    CVE-2020-10687

    HTTP Request Smuggling in Undertow

    A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker …

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  • Unscored —
    CVE-2020-10718

    A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed…

  • Unscored —
    CVE-2020-1710

    The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a…

Revision history

  1. #19

    Neue Updates von Red Hat aufgenommen

  2. #18

    Neue Updates von HITACHI aufgenommen

  3. #17

    Neue Updates von Red Hat aufgenommen

  4. #16

    Neue Updates von Red Hat aufgenommen

  5. #15

    Neue Updates von Red Hat aufgenommen

  6. #14

    Neue Updates von Red Hat aufgenommen

  7. #13

    Neue Updates von Red Hat aufgenommen

  8. #12

    Neue Updates von Red Hat aufgenommen

  9. #11

    Neue Updates von HITACHI aufgenommen

  10. #10

    Neue Updates von Red Hat aufgenommen

  11. #9

    Neue Updates von Ubuntu aufgenommen

  12. #8

    Neue Updates von SUSE aufgenommen

  13. #7

    Neue Updates von Red Hat aufgenommen

  14. #6

    Neue Updates von Red Hat aufgenommen

  15. #5

    Neue Updates von Red Hat aufgenommen

  16. #4

    Neue Updates von Red Hat aufgenommen

  17. #3

    Neue Updates von Red Hat aufgenommen

  18. #2

    Neue Updates von Red Hat aufgenommen

  19. #1

    Initiale Fassung

References