{"schemaVersion":3,"id":"RHSA-2008:0828","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP01 security update","dates":{"published":"2024-09-15T17:17:45.000Z","modified":"2025-11-22T10:17:55.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"asm","name":"asm","label":"asm","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/asm","purlType":"rpm","versions":[{"text":"< 0:1.5.3-1jpp.ep1.2.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.5.3-1jpp.ep1.2.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"cglib","name":"cglib","label":"cglib","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cglib","purlType":"rpm","versions":[{"text":"< 0:2.1.3-2jpp.ep1.6.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.1.3-2jpp.ep1.6.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"concurrent","name":"concurrent","label":"concurrent","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/concurrent","purlType":"rpm","versions":[{"text":"< 0:1.3.4-8jpp.ep1.6.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.3.4-8jpp.ep1.6.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"glassfish-jsf","name":"glassfish-jsf","label":"glassfish-jsf","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glassfish-jsf","purlType":"rpm","versions":[{"text":"< 0:1.2_08-0jpp.ep1.2.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2_08-0jpp.ep1.2.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3","name":"hibernate3","label":"hibernate3","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3","purlType":"rpm","versions":[{"text":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-annotations","name":"hibernate3-annotations","label":"hibernate3-annotations","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-annotations","purlType":"rpm","versions":[{"text":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-annotations-javadoc","name":"hibernate3-annotations-javadoc","label":"hibernate3-annotations-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-annotations-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-1.patch02.1jpp.ep1.3.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-entitymanager","name":"hibernate3-entitymanager","label":"hibernate3-entitymanager","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-entitymanager","purlType":"rpm","versions":[{"text":"< 0:3.2.1-1jpp.ep1.7.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-1jpp.ep1.7.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-entitymanager-javadoc","name":"hibernate3-entitymanager-javadoc","label":"hibernate3-entitymanager-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-entitymanager-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-1jpp.ep1.7.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-1jpp.ep1.7.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-javadoc","name":"hibernate3-javadoc","label":"hibernate3-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-javadoc","purlType":"rpm","versions":[{"text":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-aop","name":"jboss-aop","label":"jboss-aop","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-aop","purlType":"rpm","versions":[{"text":"< 0:1.5.5-1.CP01.0jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.5.5-1.CP01.0jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-cache","name":"jboss-cache","label":"jboss-cache","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-cache","purlType":"rpm","versions":[{"text":"< 0:1.4.1-4.SP9.1jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.1-4.SP9.1jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-messaging","name":"jboss-messaging","label":"jboss-messaging","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-messaging","purlType":"rpm","versions":[{"text":"< 0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-remoting","name":"jboss-remoting","label":"jboss-remoting","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-remoting","purlType":"rpm","versions":[{"text":"< 0:2.2.2-3.SP7.0jpp.ep1.3.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.2.2-3.SP7.0jpp.ep1.3.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam","name":"jboss-seam","label":"jboss-seam","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam","purlType":"rpm","versions":[{"text":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam-docs","name":"jboss-seam-docs","label":"jboss-seam-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam-docs","purlType":"rpm","versions":[{"text":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas","name":"jbossas","label":"jbossas","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas","purlType":"rpm","versions":[{"text":"< 0:4.3.0-2.GA_CP01.ep1.6.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.0-2.GA_CP01.ep1.6.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossts","name":"jbossts","label":"jbossts","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossts","purlType":"rpm","versions":[{"text":"< 1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossws","name":"jbossws","label":"jbossws","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossws","purlType":"rpm","versions":[{"text":"< 0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossxb","name":"jbossxb","label":"jbossxb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossxb","purlType":"rpm","versions":[{"text":"< 0:1.0.0-2.SP1.0jpp.ep1.2.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.0-2.SP1.0jpp.ep1.2.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"jcommon","name":"jcommon","label":"jcommon","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jcommon","purlType":"rpm","versions":[{"text":"< 0:1.0.12-1jpp.ep1.3.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.12-1jpp.ep1.3.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jfreechart","name":"jfreechart","label":"jfreechart","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jfreechart","purlType":"rpm","versions":[{"text":"< 0:1.0.9-1jpp.ep1.3.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.9-1jpp.ep1.3.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"jgroups","name":"jgroups","label":"jgroups","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jgroups","purlType":"rpm","versions":[{"text":"< 1:2.4.2-1.GA_CP01.0jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.4.2-1.GA_CP01.0jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-eap-docs","name":"rh-eap-docs","label":"rh-eap-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-eap-docs","purlType":"rpm","versions":[{"text":"< 0:4.3.0-2.GA_CP01.ep1.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.0-2.GA_CP01.ep1.4.el5","eol":null,"hubHref":null}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2008:0828","label":"access.redhat.com/errata/RHSA-2008:0828","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"http://redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/","label":"redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/","hostname":"redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437082","label":"bugzilla.redhat.com/show_bug.cgi?id=437082","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457757","label":"bugzilla.redhat.com/show_bug.cgi?id=457757","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0828.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0828.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1285","label":"access.redhat.com/security/cve/CVE-2008-1285","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1285","label":"www.cve.org/CVERecord?id=CVE-2008-1285","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1285","label":"nvd.nist.gov/vuln/detail/CVE-2008-1285","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3273","label":"access.redhat.com/security/cve/CVE-2008-3273","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3273","label":"www.cve.org/CVERecord?id=CVE-2008-3273","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3273","label":"nvd.nist.gov/vuln/detail/CVE-2008-3273","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2008-1285","CVE-2008-3273"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-15T17:17:45.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-22T10:17:55.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:29:31.676Z","stale":false,"partial":false}}