Description
A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption. This could lead to a leak of the data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | wildfly | 7.2.0.GA, 7.2.3.GA, 7.2.5.CR2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss EAP 7 | eap7-activemq-artemis +15 | 2.9.0-2.redhat_00009.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-apache-commons-beanutils | 1.9.4-1.redhat_00002.1.el6eap | RHSA-2020:0806, RHSA-2020:0805, RHSA-2020:0804 |
| Red Hat JBoss EAP 7 | eap7-apache-cxf +3 | 3.3.5-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-bouncycastle +3 | 1.60.0-2.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-codehaus-jackson +4 | 1.9.13-10.redhat_00007.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-cryptacular | 1.2.4-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-elytron-web +1 | 1.6.1-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-glassfish-el +1 | 3.0.1-4.b08_redhat_00003.1.el6eap | RHSA-2020:0806, RHSA-2020:0805, RHSA-2020:0804 |
| Red Hat JBoss EAP 7 | eap7-glassfish-jsf | 2.3.5-7.SP3_redhat_00005.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.0.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-hibernate +4 | 5.3.15-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-infinispan +8 | 9.3.8-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.4.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jackson-core +9 | 2.10.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jackson-databind | 2.9.10.2-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jaegertracing-jaeger-client-java +2 | 0.34.1-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jakarta-el | 3.0.3-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jandex | 2.1.2-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jasypt | 1.9.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-ejb-client | 4.0.28-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-genericjms | 2.0.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsf-api_2.3_spec | 3.0.0-3.SP02_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-modules | 1.10.0-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.17-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting-jmx | 3.0.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +23 | 1.3.1-8.Final_redhat_00009.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration-eap7.3-server +6 | 1.7.1-5.Final_redhat_00006.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-vfs | 3.2.15-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-weld-3.1-api +2 | 3.1.0-6.SP2_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-config +1 | 1.4.0-1.redhat_00003.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-health | 2.2.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-metrics +1 | 2.3.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-opentracing +1 | 1.3.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-rest-client +1 | 1.4.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-opensaml +13 | 3.3.1-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-picketbox +1 | 5.0.3-7.Final_redhat_00006.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-picketlink-bindings +1 | 2.5.5-23.SP12_redhat_00012.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-resteasy +19 | 3.11.2-3.Final_redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-slf4j-jboss-logmanager | 1.0.4-1.GA_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-config | 1.6.2-3.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-health | 2.2.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-metrics | 2.4.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-opentracing | 1.3.4-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-snakeyaml | 1.24.0-2.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-stax2-api | 4.2.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-sun-istack-commons +2 | 3.0.10-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-thrift | 0.13.0-1.redhat_00002.1.el6eap | RHSA-2020:0962, RHSA-2020:0806, RHSA-2020:0805 |
| Red Hat JBoss EAP 7 | eap7-txw2 +8 | 2.3.3-4.b02_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.0.28-4.SP1_redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-weld-ejb +6 | 3.1.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly +2 | 7.2.7-4.GA_redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron +1 | 1.10.6-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-http-client +4 | 1.0.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk8 +1 | 7.2.7-4.GA_redhat_00004.1.el7eap | RHSA-2020:2512, RHSA-2020:0805 |
| Red Hat JBoss EAP 7 | eap7-wildfly-naming-client | 1.0.12-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-openssl +2 | 1.0.9-2.SP03_redhat_00001.1.el6eap | RHSA-2020:0962, RHSA-2020:0806, RHSA-2020:0805 |
| Red Hat JBoss EAP 7 | eap7-wildfly-transaction-client | 1.1.9-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-woodstox-core | 6.0.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wss4j +6 | 2.2.5-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-xml-security | 2.1.4-1.redhat_00001.1.el6eap | RHSA-2020:0806, RHSA-2020:0805, RHSA-2020:0804 |
Advisories 7
- RHSA-2020:0805 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:0806 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 8 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:0804 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 6 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:2512 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2513 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2511 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:0962 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026