DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen
view advisory published 2020-10-13
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in der Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Integrität des Dienstes zu gefährden.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14340US | medium5.9 | — | ||
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacke… | ||||
| CVE-2020-14299US | medium6.5 | — | ||
A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to… | ||||
| CVE-2020-14338US | medium5.3 | — | ||
A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" f… | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory RHSA-2020:4244 vom 2020-10-13external
- RedHat Security Advisory RHSA-2020:4245 vom 2020-10-13external
- RedHat Security Advisory RHSA-2020:4246 vom 2020-10-13external
- RedHat Security Advisory RHSA-2020:4247 vom 2020-10-13external
- Red Hat Security Advisory RHSA-2020:4931 vom 2020-11-04external
- Red Hat Security Advisory RHSA-2020:5361 vom 2020-12-16external
- Red Hat Security Advisory RHSA-2021:0600 vom 2021-02-17external
- Red Hat Security Advisory RHSA-2021:0603 vom 2021-02-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan