RHSA-2018:2424: eap7-activemq-artemis Red Hat

CVSS: 7.6v3.0HighPublished

Published 20-09-2024Last modified 05-08-2026

Open JSON

Vulnerability summary

RHSA-2018:2424 is a high (CVSS 7.6) vulnerability in eap7-activemq-artemis Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.6/10

010

High · v3.0 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0

CVE-2017-12624 CVE-2018-1000180 CVE-2018-10237 CVE-2018-10862 CVE-2018-8039

Timeline

20-09-2024
PublishedVulnerability first disclosed.
05-08-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL7 security update

CVSS metrics

1 score · 1 source · 1 version

v3.07.6

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat108 products

eap7-activemq-artemis< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-cli< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-commons< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-core-client< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-dto< 0:1.5.5.013-1.redhat_1.1.ep7.el7

eap7-activemq-artemis-hornetq-protocol< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-hqclient-protocol< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-jdbc-store< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-jms-client< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-jms-server< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-journal< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-native< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-ra< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-selector< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-server< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-activemq-artemis-service-extensions< 0:1.5.5.013-1.redhat_1.1.ep7.el7
eap7-bouncycastle< 0:1.56.0-5.redhat_3.1.ep7.el7
eap7-bouncycastle-mail< 0:1.56.0-5.redhat_3.1.ep7.el7
eap7-bouncycastle-pkix< 0:1.56.0-5.redhat_3.1.ep7.el7
eap7-bouncycastle-prov< 0:1.56.0-5.redhat_3.1.ep7.el7
eap7-guava< 0:25.0.0-1.redhat_1.1.ep7.el7
eap7-guava-libraries< 0:25.0.0-1.redhat_1.1.ep7.el7
eap7-hibernate< 0:5.1.15-1.Final_redhat_1.1.ep7.el7
eap7-hibernate-core< 0:5.1.15-1.Final_redhat_1.1.ep7.el7
eap7-hibernate-entitymanager< 0:5.1.15-1.Final_redhat_1.1.ep7.el7
eap7-hibernate-envers< 0:5.1.15-1.Final_redhat_1.1.ep7.el7
eap7-hibernate-infinispan< 0:5.1.15-1.Final_redhat_1.1.ep7.el7
eap7-hibernate-java8< 0:5.1.15-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-common-api< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-common-impl< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-common-spi< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-core-api< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-core-impl< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-deployers-common< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-jdbc< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-ironjacamar-validator< 0:1.4.10-1.Final_redhat_1.1.ep7.el7
eap7-jberet< 0:1.2.6-2.Final_redhat_1.1.ep7.el7
eap7-jberet-core< 0:1.2.6-2.Final_redhat_1.1.ep7.el7
eap7-jboss-ejb-client< 0:4.0.11-1.Final_redhat_1.1.ep7.el7
eap7-jboss-remoting< 0:5.0.8-1.Final_redhat_1.1.ep7.el7
eap7-jboss-server-migration< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-cli< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-core< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-eap6.4< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-eap6.4-to-eap7.0< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-eap6.4-to-eap7.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-eap7.0< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-eap7.0-to-eap7.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-eap7.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly10.0< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly10.0-to-eap7.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly10.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly10.1-to-eap7.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly8.2< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly8.2-to-eap7.0< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly8.2-to-eap7.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly9.0< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly9.0-to-eap7.0< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-jboss-server-migration-wildfly9.0-to-eap7.1< 0:1.0.6-4.Final_redhat_4.1.ep7.el7
eap7-mod_cluster< 0:1.3.10-1.Final_redhat_1.1.ep7.el7
eap7-narayana< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-compensations< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-jbosstxbridge< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-jbossxts< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-jts-idlj< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-jts-integration< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-restat-api< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-restat-bridge< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-restat-integration< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-restat-util< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-narayana-txframework< 0:5.5.32-1.Final_redhat_1.1.ep7.el7
eap7-picketlink-api< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-bindings< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-common< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-config< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-federation< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-idm-api< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-idm-impl< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-idm-simple-schema< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-impl< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-picketlink-wildfly8< 0:2.5.5-13.SP12_redhat_1.1.ep7.el7
eap7-resteasy< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-atom-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-cdi< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-client< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-crypto< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-jackson-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-jackson2-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-jaxb-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-jaxrs< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-jettison-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-jose-jwt< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-jsapi< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-json-p-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-multipart-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-spring< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-validator-provider-11< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-resteasy-yaml-provider< 0:3.0.26-1.Final_redhat_1.1.ep7.el7
eap7-undertow< 0:1.4.18-7.SP8_redhat_1.1.ep7.el7
eap7-wildfly< 0:7.1.4-1.GA_redhat_1.1.ep7.el7
eap7-wildfly-javadocs< 0:7.1.4-2.GA_redhat_1.1.ep7.el7
eap7-wildfly-modules< 0:7.1.4-1.GA_redhat_1.1.ep7.el7
eap7-wildfly-naming-client< 0:1.0.9-1.Final_redhat_1.1.ep7.el7
eap7-wildfly-openssl-linux< 0:1.0.6-14.Final_redhat_1.1.ep7.el7
eap7-wildfly-openssl-linux-debuginfo< 0:1.0.6-14.Final_redhat_1.1.ep7.el7
eap7-wildfly-transaction-client< 0:1.0.4-1.Final_redhat_1.1.ep7.el7
eap7-wildfly-web-console-eap< 0:2.9.18-1.Final_redhat_1.1.ep7.el7

Show all 108

1 vendor · 108 products

References

30 links

Show all 30 references

security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2424.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-12624REPORT
www.cve.org/CVERecord?id=CVE-2017-12624Advisory
nvd.nist.gov/vuln/detail/CVE-2017-12624Advisory
access.redhat.com/security/cve/CVE-2018-8039REPORT
www.cve.org/CVERecord?id=CVE-2018-8039Advisory
nvd.nist.gov/vuln/detail/CVE-2018-8039Advisory
cxf.apache.org/security-advisories.data/…ARTICLE
access.redhat.com/security/cve/CVE-2018-10237REPORT
www.cve.org/CVERecord?id=CVE-2018-10237Advisory
nvd.nist.gov/vuln/detail/CVE-2018-10237Advisory
github.com/google/guava/wiki/CVE-2018-10237ARTICLE
groups.google.com/forum/ARTICLE
access.redhat.com/security/cve/CVE-2018-10862REPORT
www.cve.org/CVERecord?id=CVE-2018-10862Advisory
nvd.nist.gov/vuln/detail/CVE-2018-10862Advisory
snyk.io/research/zip-slip-vulnerabilityARTICLE
access.redhat.com/security/cve/CVE-2018-1000180REPORT
www.cve.org/CVERecord?id=CVE-2018-1000180Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1000180Advisory