DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen
view advisory published 2020-08-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Code zur Ausführung zu bringen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10714US | high7.5 | — | ||
A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a sessio… | ||||
| CVE-2020-10687US | medium4.8 | — | ||
A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to… | ||||
| CVE-2020-10718US | high7.5 | — | ||
A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL). This setti… | ||||
| CVE-2020-1748US | high7.5OT elevated | — | ||
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security manager… | ||||
| CVE-2020-1710US | medium5.3 | — | ||
The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400. | ||||
| CVE-2020-14297US | medium6.5 | — | ||
A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause servi… | ||||
| CVE-2019-14900US | medium6.5 | Exploit | ||
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals w… | ||||
| CVE-2020-10740US | high7.5 | — | ||
A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of vali… | ||||
| CVE-2020-10693US | medium5.3 | — | ||
A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This… | ||||
| CVE-2020-10683US | critical9.8 | — | ||
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation fr… | ||||
| CVE-2020-10673US | high8.8 | Exploit | ||
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-querc… | ||||
| CVE-2020-10672US | high8.8 | — | ||
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledCon… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:2832-1 vom 2020-10-02external
- RedHat Security Advisory vom 2020-08-17external
- RedHat Security Advisory vom 2020-08-17external
- RedHat Security Advisory vom 2020-08-17external
- RedHat Security Advisory vom 2020-08-17external
- Red Hat Security Advisory RHSA-2020:3501 vom 2020-08-18external
- Red Hat Security Advisory RHSA-2020:3539 vom 2020-09-02external
- Red Hat Security Advisory RHSA-2020:3585 vom 2020-08-31external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan