RHSA-2024:8823
Vulnerability Summary
Timeline
Description
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update
CVSS Metrics
- v3.1•HIGH•Score: 7.7CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Affected Systems
- redhat•eap8-activemq-artemis
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-cli
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-commons
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-core-client
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-dto
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-hornetq-protocol
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-hqclient-protocol
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-jakarta-client
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-jakarta-ra
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-jakarta-server
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-jakarta-service-extensions
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-jdbc-store
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-journal
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-native
< 1:2.0.0-2.redhat_00005.1.el8eap
- redhat•eap8-activemq-artemis-selector
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-activemq-artemis-server
< 0:2.33.0-1.redhat_00015.1.el8eap
- redhat•eap8-aesh-extensions
< 0:1.8.0-2.redhat_00001.1.el8eap
- redhat•eap8-aesh-readline
< 0:2.2.0-2.redhat_00001.1.el8eap
- redhat•eap8-apache-commons-codec
< 0:1.16.1-2.redhat_00007.1.el8eap
- redhat•eap8-apache-commons-collections
< 0:3.2.2-28.redhat_2.1.el8eap
- redhat•eap8-apache-commons-io
< 0:2.15.1-1.redhat_00001.1.el8eap
- redhat•eap8-apache-commons-lang
< 0:3.14.0-2.redhat_00006.1.el8eap
- redhat•eap8-apache-cxf
< 0:4.0.5-1.redhat_00001.1.el8eap
- redhat•eap8-apache-cxf-rt
< 0:4.0.5-1.redhat_00001.1.el8eap
- redhat•eap8-apache-cxf-services
< 0:4.0.5-1.redhat_00001.1.el8eap
- redhat•eap8-apache-cxf-tools
< 0:4.0.5-1.redhat_00001.1.el8eap
- redhat•eap8-artemis-native
< 1:2.0.0-2.redhat_00005.1.el8eap
- redhat•eap8-artemis-native-wildfly
< 1:2.0.0-2.redhat_00005.1.el8eap
- redhat•eap8-artemis-wildfly-integration
< 0:2.0.1-1.redhat_00002.1.el8eap
- redhat•eap8-asyncutil
< 0:0.1.0-2.redhat_00010.1.el8eap
- redhat•eap8-aws-java-sdk
< 0:1.12.284-2.redhat_00002.1.el8eap
- redhat•eap8-aws-java-sdk-core
< 0:1.12.284-2.redhat_00002.1.el8eap
- redhat•eap8-aws-java-sdk-kms
< 0:1.12.284-2.redhat_00002.1.el8eap
- redhat•eap8-aws-java-sdk-s3
< 0:1.12.284-2.redhat_00002.1.el8eap
- redhat•eap8-cryptacular
< 0:1.2.5-2.redhat_00001.1.el8eap
- redhat•eap8-eap-product-conf-parent
< 0:800.4.0-1.GA_redhat_00001.1.el8eap
- redhat•eap8-eap-product-conf-wildfly-ee-feature-pack
< 0:800.4.0-1.GA_redhat_00001.1.el8eap
- redhat•eap8-fastinfoset
< 0:2.1.0-4.redhat_00001.1.el8eap
- redhat•eap8-hibernate
< 0:6.2.31-1.Final_redhat_00002.1.el8eap
- redhat•eap8-hibernate-core
< 0:6.2.31-1.Final_redhat_00002.1.el8eap
- redhat•eap8-hibernate-envers
< 0:6.2.31-1.Final_redhat_00002.1.el8eap
- redhat•eap8-hibernate-validator
< 0:8.0.1-3.Final_redhat_00001.1.el8eap
- redhat•eap8-hibernate-validator-cdi
< 0:8.0.1-3.Final_redhat_00001.1.el8eap
- redhat•eap8-hppc
< 0:0.8.1-2.redhat_00001.1.el8eap
- redhat•eap8-insights-java-client
< 0:1.1.3-1.redhat_00001.1.el8eap
- redhat•eap8-jakarta-servlet-jsp-jstl
< 0:3.0.1-1.redhat_00001.1.el8eap
- redhat•eap8-jakarta-servlet-jsp-jstl-api
< 0:3.0.1-1.redhat_00001.1.el8eap
- redhat•eap8-jboss-cert-helper
< 0:1.1.3-1.redhat_00001.1.el8eap
- redhat•eap8-jboss-logging
< 0:3.5.3-1.Final_redhat_00001.1.el8eap
- redhat•eap8-jctools
< 0:4.0.2-1.redhat_00001.1.el8eap
Showing first 50 affected entries in server-rendered view.
References (53)
- https://access.redhat.com/errata/RHSA-2024:8823
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/8.0/
- https://bugzilla.redhat.com/show_bug.cgi?id=2108554
- https://bugzilla.redhat.com/show_bug.cgi?id=2278615
- https://bugzilla.redhat.com/show_bug.cgi?id=2298829
- https://bugzilla.redhat.com/show_bug.cgi?id=2309764
- https://bugzilla.redhat.com/show_bug.cgi?id=2311641
- https://bugzilla.redhat.com/show_bug.cgi?id=2312511
- https://issues.redhat.com/browse/JBEAP-24945
- https://issues.redhat.com/browse/JBEAP-25035
- https://issues.redhat.com/browse/JBEAP-27002
- https://issues.redhat.com/browse/JBEAP-27194
- https://issues.redhat.com/browse/JBEAP-27247
- https://issues.redhat.com/browse/JBEAP-27276
- https://issues.redhat.com/browse/JBEAP-27293
- https://issues.redhat.com/browse/JBEAP-27392
- https://issues.redhat.com/browse/JBEAP-27543
- https://issues.redhat.com/browse/JBEAP-27585
- https://issues.redhat.com/browse/JBEAP-27643
- https://issues.redhat.com/browse/JBEAP-27659
- https://issues.redhat.com/browse/JBEAP-27688
- https://issues.redhat.com/browse/JBEAP-27694
- https://issues.redhat.com/browse/JBEAP-27957
- https://issues.redhat.com/browse/JBEAP-28057
- https://issues.redhat.com/browse/JBEAP-28278
- https://issues.redhat.com/browse/JBEAP-28289
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8823.json
- https://access.redhat.com/security/cve/CVE-2022-34169
- https://www.cve.org/CVERecord?id=CVE-2022-34169
- https://nvd.nist.gov/vuln/detail/CVE-2022-34169
- https://access.redhat.com/security/cve/CVE-2023-52428
- https://www.cve.org/CVERecord?id=CVE-2023-52428
- https://nvd.nist.gov/vuln/detail/CVE-2023-52428
- https://access.redhat.com/security/cve/CVE-2024-4029
- https://www.cve.org/CVERecord?id=CVE-2024-4029
- https://nvd.nist.gov/vuln/detail/CVE-2024-4029
- https://access.redhat.com/security/cve/CVE-2024-8698
- https://www.cve.org/CVERecord?id=CVE-2024-8698
- https://nvd.nist.gov/vuln/detail/CVE-2024-8698
- https://access.redhat.com/security/cve/CVE-2024-8883
- https://www.cve.org/CVERecord?id=CVE-2024-8883
- https://nvd.nist.gov/vuln/detail/CVE-2024-8883
- https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java
- https://access.redhat.com/security/cve/CVE-2024-41172
- https://www.cve.org/CVERecord?id=CVE-2024-41172
- https://nvd.nist.gov/vuln/detail/CVE-2024-41172
- https://github.com/advisories/GHSA-4mgg-fqfq-64hg
- https://lists.apache.org/thread/n2hvbrgwpdtcqdccod8by28ynnolybl6
- https://osv.dev/vulnerability/GHSA-4mgg-fqfq-64hg
- https://github.com/advisories/GHSA-x7g6-rwhc-g7mj
- https://github.com/wildfly/wildfly/pull/17914
- https://github.com/wildfly/wildfly/pull/17935