DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen
view advisory published 2021-09-08
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in der Red Hat JBoss Enterprise Application Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Zustand auszulösen und vertrauliche Informationen offenzulegen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3644US | low3.3 | — | ||
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to th… | ||||
| CVE-2021-3690US | high7.5 | — | ||
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The hig… | ||||
| CVE-2021-3597US | medium5.9 | — | ||
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnera… | ||||
| CVE-2021-28170US | medium5.3 | — | ||
In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory vom 2021-09-08external
- Red Hat Security Advisory vom 2021-09-08external
- Red Hat Security Advisory vom 2021-09-08external
- Red Hat Security Advisory vom 2021-09-08external
- Red Hat Security Advisory RHSA-2021:3516 vom 2021-09-13external
- Red Hat Security Advisory RHSA-2021:3656 vom 2021-09-23external
- Red Hat Security Advisory RHSA-2021:3658 vom 2021-09-23external
- Red Hat Security Advisory RHSA-2021:3660 vom 2021-09-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan