DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen
view advisory published 2021-01-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Informationen offenzulegen und um einen Denial of Service zu verursachen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-27782US | high7.5 | — | ||
A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant charact… | ||||
| CVE-2020-27822US | medium5.9 | — | ||
A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interce… | ||||
| CVE-2020-25640US | medium5.3 | — | ||
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in t… | ||||
| CVE-2020-25689US | medium6.5 | — | ||
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly cl… | ||||
| CVE-2020-25633US | medium5.3 | — | ||
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the serve… | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory vom 2021-01-25external
- RedHat Security Advisory vom 2021-01-25external
- RedHat Security Advisory vom 2021-01-25external
- RedHat Security Advisory vom 2021-01-25external
- Red Hat Security Advisory RHSA-2021:0295 vom 2021-02-08external
- Red Hat Security Advisory RHSA-2021:0317 vom 2021-02-01external
- Red Hat Security Advisory RHSA-2021:1004 vom 2021-03-29external
- Red Hat Security Advisory RHSA-2021:1313 vom 2021-04-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan