DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss A-MQ: Mehrere Schwachstellen
view advisory published 2023-12-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss A-MQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31582US | high7.5OT elevated | — | ||
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less. | ||||
| CVE-2023-5072US | high7.5 | — | ||
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being… | ||||
| CVE-2023-44981US | critical9.1 | — | ||
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the au… | ||||
| CVE-2023-42445US | medium5.3 | — | ||
Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, when Gradle parses XML files, resolving XML external entities is… | ||||
| CVE-2023-44387US | medium6.5 | — | ||
Gradle is a build tool with a focus on build automation and support for multi-language development. When copying or archiving symlinked files, Gradle resolves them but applies the… | ||||
| CVE-2023-40167US | medium5.3 | Exploit | ||
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in… | ||||
| CVE-2023-41080US | medium6.1 | Exploit | ||
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10,… | ||||
| CVE-2022-46751US | high8.2 | — | ||
Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any versi… | ||||
| CVE-2023-33201US | medium5.3 | — | ||
Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to vali… | ||||
| CVE-2023-2976US | high7.1 | — | ||
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows o… | ||||
| CVE-2023-20873US | critical9.8 | — | ||
In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry could be susceptible to a security bypass. U… | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory vom 2023-12-06external
- Red Hat Security Advisory RHSA-2023:7697 vom 2023-12-07external
- Red Hat Security Advisory RHSA-2024:0705 vom 2024-02-06external
- Red Hat Security Advisory RHSA-2024:0903 vom 2024-02-20external
- Red Hat Security Advisory RHSA-2024:2945 vom 2024-05-21external
- Red Hat Security Advisory RHSA-2024:3354 vom 2024-05-24external
- Red Hat Security Advisory RHSA-2024:6536 vom 2024-09-10external
- Atlassian Security Bulletin December 12 2023 vom 2023-12-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan