Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
JBoss EAP on Amazon EC2 Vulnerability and Updates
published 2 years ago
Summary
Red Hat JBoss Enterprise Application Platform (EAP) on Amazon EC2 servers may contain security vulnerabilities and requires updates. Affected users should apply the latest patches to ensure the security and stability of their applications.
What to do
- Update redhat jboss-ec2-eap to version 0:7.5.19-2.Final_redhat_2.ep6.el6.
- Update redhat jboss-ec2-eap-samples to version 0:7.5.19-2.Final_redhat_2.ep6.el6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:jboss_enterprise_application_platform:6::el6 | redhat | jboss-ec2-eap |
< 0:7.5.19-2.Final_redhat_2.ep6.el6 Fix: upgrade to 0:7.5.19-2.Final_redhat_2.ep6.el6
|
| Red Hat:jboss_enterprise_application_platform:6::el6 | redhat | jboss-ec2-eap-samples |
< 0:7.5.19-2.Final_redhat_2.ep6.el6 Fix: upgrade to 0:7.5.19-2.Final_redhat_2.ep6.el6
|
Original advisory text
Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update
References
- https://access.redhat.com/errata/RHSA-2018:0275 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_applicati... Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1494283 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1498378 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1530457 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0275.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2017-12174 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2017-12174 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2017-12174 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2017-12617 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2017-12617 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2017-12617 Vendor Advisory
- https://tomcat.apache.org/security-7.html Third Party Advisory
- https://tomcat.apache.org/security-8.html Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2018-1041 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2018-1041 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-1041 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published13 Sep 2024
Updated16 Jun 2026
First seen16 Jun 2026
Sources
RHSA-2018:0275 · OSV
Track software like this
Free during beta