RHSA-2016:1435CriticalCVSS 9.8
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.9 update
🔗 CVE IDs covered (2)
📋 Description
CVE-2015-5174 — tomcat: URL Normalization issue CVE-2016-2141 — JGroups: Authorization bypass
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform 6.4
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The JBoss server process must be restarted for the update to take effect. Workaround: Please refer to https://access.redhat.com/articles/2360521 for more information.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2016:1435
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://access.redhat.com/documentation/en/jboss-enterprise-application-platform/
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4
- externalhttps://access.redhat.com/articles/2360521
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1265698
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1313589
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1435.json