Skip to content
OpenAdvisories
Medium WID-SEC-2023-1273 5 CVEs

Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen

Published Jan 25, 2021 · Updated Jul 10, 2025 · Revision 11 · de-DE

Vendor: Hitachi Vendor: Red Hat Vendor: Ubuntu Product: Enterprise Linux Product: JBoss Enterprise Application Platform Product: Linux Product: Ops Center Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Informationen offenzulegen und um einen Denial of Service zu verursachen.

Product

JBoss Enterprise Application Platform ist eine skalierbare Plattform für Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.

Vulnerabilities 5

  • High 7.5
    CVE-2020-27782

    Denial of service in Undertow

    A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerabilit…

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  • Medium 5.9
    CVE-2020-27822

    Wildfly has a memory leak vulnerability

    A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to…

    org.wildfly:wildfly-parent Maven
  • Medium 5.3
    CVE-2020-25633

    Generation of Error Message Containing Sensitive Information in RESTEasy client

    A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat…

    Red Hat resteasy-client resteasy resteasy3.0 Debian Ubuntu Maven
  • Medium 5.3
    CVE-2020-25640

    Wildfly logs plaintext passwords

    A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

    org.wildfly:wildfly-parent Maven
  • Medium 5.3
    CVE-2020-25689

    Uncontrolled Resource Consumption in WildFly

    A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attack…

    Red Hat wildfly-core org.wildfly:wildfly-dist Maven

Revision history

  1. #11

    Neue Updates von Ubuntu aufgenommen

  2. #10

    Neue Updates von Red Hat aufgenommen

  3. #9

    Neue Updates von HITACHI aufgenommen

  4. #8

    Neue Updates von Red Hat aufgenommen

  5. #7

    Neue Updates von Red Hat aufgenommen

  6. #6

    Neue Updates von Red Hat aufgenommen

  7. #5

    Neue Updates von Red Hat aufgenommen

  8. #4

    Neue Updates von Red Hat aufgenommen

  9. #3

    Neue Updates von Red Hat aufgenommen

  10. #2

    Neue Updates von Red Hat aufgenommen

  11. #1

    Initiale Fassung

References