What is RHSA-2014:0887?

RHSA-2014:0887 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: JBoss Remoting security update

Which CVE IDs does RHSA-2014:0887 cover?

RHSA-2014:0887 covers the following CVE IDs: CVE-2014-3518. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2014:0887?

RHSA-2014:0887 affects 4 products, including: JBoss Enterprise BRMS Platform 5.3; Red Hat JBoss Enterprise Application Platform 5.2; Red Hat JBoss Portal 5.2; Red Hat JBoss SOA Platform 5.3.

RHSA-2014:0887High

Red Hat Security Advisory: JBoss Remoting security update

Vendor

Red Hat Product Security

Published

July 16, 2014

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2014-3518 →

📋 Description

CVE-2014-3518 — 5: Remote code execution via unauthenticated JMX/RMI connector

🎯 Affected products4

JBoss Enterprise BRMS Platform 5.3
Red Hat JBoss Enterprise Application Platform 5.2
Red Hat JBoss Portal 5.2
Red Hat JBoss SOA Platform 5.3

✅ Remediation

In case your server is affected, undeploy jmx-remoting.sar if JMX remoting is not required by your applications. If your applications do require it, secure JMX remoting by following the instructions at https://access.redhat.com/solutions/238943 For more information, see https://access.redhat.com/solutions/1120423

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2014:0887
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://access.redhat.com/solutions/238943
externalhttps://access.redhat.com/solutions/1120423
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1112545
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0887.json