RHSA-2020:2781
- Source
- https://access.redhat.com/errata/RHSA-2020:2781
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2020:2781.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2020:2781
- Related
- Published
- 2024-09-29T17:25:49Z
- Modified
- 2024-10-06T17:10:41Z
- Severity
-
- 7.6 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.23 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2020:2781
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1700855
- https://bugzilla.redhat.com/show_bug.cgi?id=1708467
- https://bugzilla.redhat.com/show_bug.cgi?id=1710432
- https://bugzilla.redhat.com/show_bug.cgi?id=1770615
- https://bugzilla.redhat.com/show_bug.cgi?id=1772542
- https://bugzilla.redhat.com/show_bug.cgi?id=1806398
- https://bugzilla.redhat.com/show_bug.cgi?id=1816579
- https://bugzilla.redhat.com/show_bug.cgi?id=1816629
- https://bugzilla.redhat.com/show_bug.cgi?id=1819214
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2781.json
- https://access.redhat.com/security/cve/CVE-2019-14885
- https://www.cve.org/CVERecord?id=CVE-2019-14885
- https://nvd.nist.gov/vuln/detail/CVE-2019-14885
- https://access.redhat.com/security/cve/CVE-2020-1938
- https://www.cve.org/CVERecord?id=CVE-2020-1938
- https://nvd.nist.gov/vuln/detail/CVE-2020-1938
- https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/
- https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.100
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.51
- https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.31
- https://www.cnvd.org.cn/webinfo/show/5415
- https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Affected packages
Red Hat:jboss_enterprise_application_platform:6::el5 / glassfish-jsf12-eap6
Package
- Name
- glassfish-jsf12-eap6
- Purl
- pkg:rpm/redhat/glassfish-jsf12-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / hornetq
Package
- Name
- hornetq
- Purl
- pkg:rpm/redhat/hornetq
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-common-api-eap6
Package
- Name
- ironjacamar-common-api-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-common-api-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-common-impl-eap6
Package
- Name
- ironjacamar-common-impl-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-common-impl-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-common-spi-eap6
Package
- Name
- ironjacamar-common-spi-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-common-spi-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-core-api-eap6
Package
- Name
- ironjacamar-core-api-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-core-api-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-core-impl-eap6
Package
- Name
- ironjacamar-core-impl-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-core-impl-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-deployers-common-eap6
Package
- Name
- ironjacamar-deployers-common-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-deployers-common-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-eap6
Package
- Name
- ironjacamar-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-jdbc-eap6
Package
- Name
- ironjacamar-jdbc-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-jdbc-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-spec-api-eap6
Package
- Name
- ironjacamar-spec-api-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-spec-api-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / ironjacamar-validator-eap6
Package
- Name
- ironjacamar-validator-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-validator-eap6
Red Hat:jboss_enterprise_application_platform:6::el5 / jbosgi-repository
Package
- Name
- jbosgi-repository
- Purl
- pkg:rpm/redhat/jbosgi-repository
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-appclient
Package
- Name
- jboss-as-appclient
- Purl
- pkg:rpm/redhat/jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-cli
Package
- Name
- jboss-as-cli
- Purl
- pkg:rpm/redhat/jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-client-all
Package
- Name
- jboss-as-client-all
- Purl
- pkg:rpm/redhat/jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-clustering
Package
- Name
- jboss-as-clustering
- Purl
- pkg:rpm/redhat/jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-cmp
Package
- Name
- jboss-as-cmp
- Purl
- pkg:rpm/redhat/jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-configadmin
Package
- Name
- jboss-as-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-connector
Package
- Name
- jboss-as-connector
- Purl
- pkg:rpm/redhat/jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-controller
Package
- Name
- jboss-as-controller
- Purl
- pkg:rpm/redhat/jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-controller-client
Package
- Name
- jboss-as-controller-client
- Purl
- pkg:rpm/redhat/jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-core-security
Package
- Name
- jboss-as-core-security
- Purl
- pkg:rpm/redhat/jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-deployment-repository
Package
- Name
- jboss-as-deployment-repository
- Purl
- pkg:rpm/redhat/jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-deployment-scanner
Package
- Name
- jboss-as-deployment-scanner
- Purl
- pkg:rpm/redhat/jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-domain-http
Package
- Name
- jboss-as-domain-http
- Purl
- pkg:rpm/redhat/jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-domain-management
Package
- Name
- jboss-as-domain-management
- Purl
- pkg:rpm/redhat/jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-ee
Package
- Name
- jboss-as-ee
- Purl
- pkg:rpm/redhat/jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-ee-deployment
Package
- Name
- jboss-as-ee-deployment
- Purl
- pkg:rpm/redhat/jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-ejb3
Package
- Name
- jboss-as-ejb3
- Purl
- pkg:rpm/redhat/jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-embedded
Package
- Name
- jboss-as-embedded
- Purl
- pkg:rpm/redhat/jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-host-controller
Package
- Name
- jboss-as-host-controller
- Purl
- pkg:rpm/redhat/jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jacorb
Package
- Name
- jboss-as-jacorb
- Purl
- pkg:rpm/redhat/jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jaxr
Package
- Name
- jboss-as-jaxr
- Purl
- pkg:rpm/redhat/jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jaxrs
Package
- Name
- jboss-as-jaxrs
- Purl
- pkg:rpm/redhat/jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jdr
Package
- Name
- jboss-as-jdr
- Purl
- pkg:rpm/redhat/jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jmx
Package
- Name
- jboss-as-jmx
- Purl
- pkg:rpm/redhat/jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jpa
Package
- Name
- jboss-as-jpa
- Purl
- pkg:rpm/redhat/jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jsf
Package
- Name
- jboss-as-jsf
- Purl
- pkg:rpm/redhat/jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jsr77
Package
- Name
- jboss-as-jsr77
- Purl
- pkg:rpm/redhat/jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-logging
Package
- Name
- jboss-as-logging
- Purl
- pkg:rpm/redhat/jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-mail
Package
- Name
- jboss-as-mail
- Purl
- pkg:rpm/redhat/jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-management-client-content
Package
- Name
- jboss-as-management-client-content
- Purl
- pkg:rpm/redhat/jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-messaging
Package
- Name
- jboss-as-messaging
- Purl
- pkg:rpm/redhat/jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-modcluster
Package
- Name
- jboss-as-modcluster
- Purl
- pkg:rpm/redhat/jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-naming
Package
- Name
- jboss-as-naming
- Purl
- pkg:rpm/redhat/jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-network
Package
- Name
- jboss-as-network
- Purl
- pkg:rpm/redhat/jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-osgi
Package
- Name
- jboss-as-osgi
- Purl
- pkg:rpm/redhat/jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-osgi-configadmin
Package
- Name
- jboss-as-osgi-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-osgi-service
Package
- Name
- jboss-as-osgi-service
- Purl
- pkg:rpm/redhat/jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-picketlink
Package
- Name
- jboss-as-picketlink
- Purl
- pkg:rpm/redhat/jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-platform-mbean
Package
- Name
- jboss-as-platform-mbean
- Purl
- pkg:rpm/redhat/jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-pojo
Package
- Name
- jboss-as-pojo
- Purl
- pkg:rpm/redhat/jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-process-controller
Package
- Name
- jboss-as-process-controller
- Purl
- pkg:rpm/redhat/jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-protocol
Package
- Name
- jboss-as-protocol
- Purl
- pkg:rpm/redhat/jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-remoting
Package
- Name
- jboss-as-remoting
- Purl
- pkg:rpm/redhat/jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-sar
Package
- Name
- jboss-as-sar
- Purl
- pkg:rpm/redhat/jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-security
Package
- Name
- jboss-as-security
- Purl
- pkg:rpm/redhat/jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-server
Package
- Name
- jboss-as-server
- Purl
- pkg:rpm/redhat/jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-system-jmx
Package
- Name
- jboss-as-system-jmx
- Purl
- pkg:rpm/redhat/jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-threads
Package
- Name
- jboss-as-threads
- Purl
- pkg:rpm/redhat/jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-transactions
Package
- Name
- jboss-as-transactions
- Purl
- pkg:rpm/redhat/jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-version
Package
- Name
- jboss-as-version
- Purl
- pkg:rpm/redhat/jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-web
Package
- Name
- jboss-as-web
- Purl
- pkg:rpm/redhat/jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-webservices
Package
- Name
- jboss-as-webservices
- Purl
- pkg:rpm/redhat/jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-weld
Package
- Name
- jboss-as-weld
- Purl
- pkg:rpm/redhat/jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-xts
Package
- Name
- jboss-as-xts
- Purl
- pkg:rpm/redhat/jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-remoting3-jmx
Package
- Name
- jboss-remoting3-jmx
- Purl
- pkg:rpm/redhat/jboss-remoting3-jmx
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-appclient
Package
- Name
- jbossas-appclient
- Purl
- pkg:rpm/redhat/jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-bundles
Package
- Name
- jbossas-bundles
- Purl
- pkg:rpm/redhat/jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-core
Package
- Name
- jbossas-core
- Purl
- pkg:rpm/redhat/jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-domain
Package
- Name
- jbossas-domain
- Purl
- pkg:rpm/redhat/jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-javadocs
Package
- Name
- jbossas-javadocs
- Purl
- pkg:rpm/redhat/jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-modules-eap
Package
- Name
- jbossas-modules-eap
- Purl
- pkg:rpm/redhat/jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-product-eap
Package
- Name
- jbossas-product-eap
- Purl
- pkg:rpm/redhat/jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-standalone
Package
- Name
- jbossas-standalone
- Purl
- pkg:rpm/redhat/jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-welcome-content-eap
Package
- Name
- jbossas-welcome-content-eap
- Purl
- pkg:rpm/redhat/jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossweb
Package
- Name
- jbossweb
- Purl
- pkg:rpm/redhat/jbossweb