RHSA-2021:0250HighCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update

Published
January 25, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (6)

CVE-2020-25640 →CVE-2020-25689 →CVE-2020-27782 →CVE-2020-27822 →CVE-2020-13956 →CVE-2020-25633 →

📋 Description

CVE-2020-13956 — apache-httpclient: incorrect handling of malformed authority component in request URIs CVE-2020-25633 — resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling CVE-2020-25640 — wildfly: resource adapter logs plaintext JMS password at warning level on connection error CVE-2020-25689 — wildfly-core: memory leak in WildFly host-controller in domain mode while not able to reconnect to domain-controller CVE-2020-27782 — undertow: special character in query results in server errors CVE-2020-27822 — wildfly: Potential Memory leak in Wildfly when using OpenTracing

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 7

✅ Remediation

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The References section of this erratum contain a download link (you must log in to download the update). The JBoss server process must be restarted for the update to take effect. Workaround: The issue can be mitigated by using HTTP/1.1 instead of AJP to proxy to the back-end.

🔗 References (30)