RHSA-2020:4244MediumCVSS 5.9

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 6

Published
October 13, 2020
Last Modified
August 4, 2026

🔗 CVE IDs covered (4)

CVE-2020-14340 →CVE-2020-1954 →CVE-2020-14299 →CVE-2020-14338 →

📋 Description

CVE-2020-1954 — cxf: JMX integration is vulnerable to a MITM attack CVE-2020-14299 — picketbox: JBoss EAP reload to admin-only mode allows authentication bypass CVE-2020-14338 — wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl CVE-2020-14340 — xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS

🎯 Affected products123

  • Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-0:2.9.0-5.redhat_00011.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-cli-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-commons-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-core-client-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-dto-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-hornetq-protocol-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-hqclient-protocol-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-jdbc-store-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-jms-client-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-jms-server-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-journal-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-native-1:1.0.2-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-native-1:1.0.2-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-ra-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-selector-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-server-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-service-extensions-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-activemq-artemis-tools-0:2.9.0-5.redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-commons-codec-0:1.14.0-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-commons-codec-0:1.14.0-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-commons-lang-0:3.10.0-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-commons-lang-0:3.10.0-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-cxf-0:3.3.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-cxf-0:3.3.7-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-cxf-rt-0:3.3.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-cxf-services-0:3.3.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-apache-cxf-tools-0:3.3.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • eap7-artemis-native-1:1.0.2-3.redhat_1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server
  • +93 more not shown

✅ Remediation

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. For details about how to apply this update, see: https://access.redhat.com/articles/11258

🔗 References (42)