RHSA-2022:5459
- Source
- https://access.redhat.com/errata/RHSA-2022:5459
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2022:5459.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2022:5459
- Related
- Published
- 2024-09-29T18:52:13Z
- Modified
- 2024-10-27T20:57:11Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.24 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2022:5459
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4/html-single/installation_guide/index
- https://bugzilla.redhat.com/show_bug.cgi?id=1857024
- https://bugzilla.redhat.com/show_bug.cgi?id=1871928
- https://bugzilla.redhat.com/show_bug.cgi?id=1873620
- https://bugzilla.redhat.com/show_bug.cgi?id=1875176
- https://bugzilla.redhat.com/show_bug.cgi?id=2031667
- https://bugzilla.redhat.com/show_bug.cgi?id=2041949
- https://bugzilla.redhat.com/show_bug.cgi?id=2041959
- https://bugzilla.redhat.com/show_bug.cgi?id=2041967
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5459.json
- https://access.redhat.com/security/cve/CVE-2020-13935
- https://www.cve.org/CVERecord?id=CVE-2020-13935
- https://nvd.nist.gov/vuln/detail/CVE-2020-13935
- http://mail-archives.apache.org/mod_mbox/tomcat-announce/202007.mbox/%3C39e4200c-6f4e-b85d-fe4b-a9c2bd5fdc3d%40apache.org%3E
- http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M7
- http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.105
- http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.57
- http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.37
- https://access.redhat.com/security/cve/CVE-2020-14384
- https://www.cve.org/CVERecord?id=CVE-2020-14384
- https://nvd.nist.gov/vuln/detail/CVE-2020-14384
- https://access.redhat.com/security/cve/CVE-2021-4104
- https://www.cve.org/CVERecord?id=CVE-2021-4104
- https://nvd.nist.gov/vuln/detail/CVE-2021-4104
- https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126
- https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301
- https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx
- https://www.openwall.com/lists/oss-security/2021/12/13/1
- https://access.redhat.com/security/cve/CVE-2022-23302
- https://www.cve.org/CVERecord?id=CVE-2022-23302
- https://nvd.nist.gov/vuln/detail/CVE-2022-23302
- https://www.openwall.com/lists/oss-security/2022/01/18/3
- https://access.redhat.com/security/cve/CVE-2022-23305
- https://www.cve.org/CVERecord?id=CVE-2022-23305
- https://nvd.nist.gov/vuln/detail/CVE-2022-23305
- https://www.openwall.com/lists/oss-security/2022/01/18/4
- https://access.redhat.com/security/cve/CVE-2022-23307
- https://www.cve.org/CVERecord?id=CVE-2022-23307
- https://nvd.nist.gov/vuln/detail/CVE-2022-23307
- https://www.openwall.com/lists/oss-security/2022/01/18/5
Affected packages
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-appclient
Package
- Name
- jboss-as-appclient
- Purl
- pkg:rpm/redhat/jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-cli
Package
- Name
- jboss-as-cli
- Purl
- pkg:rpm/redhat/jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-client-all
Package
- Name
- jboss-as-client-all
- Purl
- pkg:rpm/redhat/jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-clustering
Package
- Name
- jboss-as-clustering
- Purl
- pkg:rpm/redhat/jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-cmp
Package
- Name
- jboss-as-cmp
- Purl
- pkg:rpm/redhat/jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-configadmin
Package
- Name
- jboss-as-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-connector
Package
- Name
- jboss-as-connector
- Purl
- pkg:rpm/redhat/jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-controller
Package
- Name
- jboss-as-controller
- Purl
- pkg:rpm/redhat/jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-controller-client
Package
- Name
- jboss-as-controller-client
- Purl
- pkg:rpm/redhat/jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-core-security
Package
- Name
- jboss-as-core-security
- Purl
- pkg:rpm/redhat/jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-deployment-repository
Package
- Name
- jboss-as-deployment-repository
- Purl
- pkg:rpm/redhat/jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-deployment-scanner
Package
- Name
- jboss-as-deployment-scanner
- Purl
- pkg:rpm/redhat/jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-domain-http
Package
- Name
- jboss-as-domain-http
- Purl
- pkg:rpm/redhat/jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-domain-management
Package
- Name
- jboss-as-domain-management
- Purl
- pkg:rpm/redhat/jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-ee
Package
- Name
- jboss-as-ee
- Purl
- pkg:rpm/redhat/jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-ee-deployment
Package
- Name
- jboss-as-ee-deployment
- Purl
- pkg:rpm/redhat/jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-ejb3
Package
- Name
- jboss-as-ejb3
- Purl
- pkg:rpm/redhat/jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-embedded
Package
- Name
- jboss-as-embedded
- Purl
- pkg:rpm/redhat/jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-host-controller
Package
- Name
- jboss-as-host-controller
- Purl
- pkg:rpm/redhat/jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jacorb
Package
- Name
- jboss-as-jacorb
- Purl
- pkg:rpm/redhat/jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jaxr
Package
- Name
- jboss-as-jaxr
- Purl
- pkg:rpm/redhat/jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jaxrs
Package
- Name
- jboss-as-jaxrs
- Purl
- pkg:rpm/redhat/jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jdr
Package
- Name
- jboss-as-jdr
- Purl
- pkg:rpm/redhat/jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jmx
Package
- Name
- jboss-as-jmx
- Purl
- pkg:rpm/redhat/jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jpa
Package
- Name
- jboss-as-jpa
- Purl
- pkg:rpm/redhat/jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jsf
Package
- Name
- jboss-as-jsf
- Purl
- pkg:rpm/redhat/jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jsr77
Package
- Name
- jboss-as-jsr77
- Purl
- pkg:rpm/redhat/jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-logging
Package
- Name
- jboss-as-logging
- Purl
- pkg:rpm/redhat/jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-mail
Package
- Name
- jboss-as-mail
- Purl
- pkg:rpm/redhat/jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-management-client-content
Package
- Name
- jboss-as-management-client-content
- Purl
- pkg:rpm/redhat/jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-messaging
Package
- Name
- jboss-as-messaging
- Purl
- pkg:rpm/redhat/jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-modcluster
Package
- Name
- jboss-as-modcluster
- Purl
- pkg:rpm/redhat/jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-naming
Package
- Name
- jboss-as-naming
- Purl
- pkg:rpm/redhat/jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-network
Package
- Name
- jboss-as-network
- Purl
- pkg:rpm/redhat/jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-osgi
Package
- Name
- jboss-as-osgi
- Purl
- pkg:rpm/redhat/jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-osgi-configadmin
Package
- Name
- jboss-as-osgi-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-osgi-service
Package
- Name
- jboss-as-osgi-service
- Purl
- pkg:rpm/redhat/jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-picketlink
Package
- Name
- jboss-as-picketlink
- Purl
- pkg:rpm/redhat/jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-platform-mbean
Package
- Name
- jboss-as-platform-mbean
- Purl
- pkg:rpm/redhat/jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-pojo
Package
- Name
- jboss-as-pojo
- Purl
- pkg:rpm/redhat/jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-process-controller
Package
- Name
- jboss-as-process-controller
- Purl
- pkg:rpm/redhat/jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-protocol
Package
- Name
- jboss-as-protocol
- Purl
- pkg:rpm/redhat/jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-remoting
Package
- Name
- jboss-as-remoting
- Purl
- pkg:rpm/redhat/jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-sar
Package
- Name
- jboss-as-sar
- Purl
- pkg:rpm/redhat/jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-security
Package
- Name
- jboss-as-security
- Purl
- pkg:rpm/redhat/jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-server
Package
- Name
- jboss-as-server
- Purl
- pkg:rpm/redhat/jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-system-jmx
Package
- Name
- jboss-as-system-jmx
- Purl
- pkg:rpm/redhat/jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-threads
Package
- Name
- jboss-as-threads
- Purl
- pkg:rpm/redhat/jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-transactions
Package
- Name
- jboss-as-transactions
- Purl
- pkg:rpm/redhat/jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-version
Package
- Name
- jboss-as-version
- Purl
- pkg:rpm/redhat/jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-web
Package
- Name
- jboss-as-web
- Purl
- pkg:rpm/redhat/jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-webservices
Package
- Name
- jboss-as-webservices
- Purl
- pkg:rpm/redhat/jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-weld
Package
- Name
- jboss-as-weld
- Purl
- pkg:rpm/redhat/jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-xts
Package
- Name
- jboss-as-xts
- Purl
- pkg:rpm/redhat/jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-appclient
Package
- Name
- jbossas-appclient
- Purl
- pkg:rpm/redhat/jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-bundles
Package
- Name
- jbossas-bundles
- Purl
- pkg:rpm/redhat/jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-core
Package
- Name
- jbossas-core
- Purl
- pkg:rpm/redhat/jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-domain
Package
- Name
- jbossas-domain
- Purl
- pkg:rpm/redhat/jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-javadocs
Package
- Name
- jbossas-javadocs
- Purl
- pkg:rpm/redhat/jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-modules-eap
Package
- Name
- jbossas-modules-eap
- Purl
- pkg:rpm/redhat/jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-product-eap
Package
- Name
- jbossas-product-eap
- Purl
- pkg:rpm/redhat/jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-standalone
Package
- Name
- jbossas-standalone
- Purl
- pkg:rpm/redhat/jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-welcome-content-eap
Package
- Name
- jbossas-welcome-content-eap
- Purl
- pkg:rpm/redhat/jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossts
Package
- Name
- jbossts
- Purl
- pkg:rpm/redhat/jbossts