What is RHSA-2017:3218?

RHSA-2017:3218 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update

Which CVE IDs does RHSA-2017:3218 cover?

RHSA-2017:3218 covers the following CVE IDs: CVE-2017-2582. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2017:3218?

RHSA-2017:3218 has a CVSS v3 base score of 6.5, published by Red Hat Product Security.

Which products are affected by RHSA-2017:3218?

RHSA-2017:3218 affects 141 products, including: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server; hornetq-0:2.3.25-24.SP22_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server; hornetq-0:2.3.25-24.SP22_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server; jboss-as-appclient-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server; jboss-as-appclient-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server; and others — see the full list on the advisory page.

RHSA-2017:3218MediumCVSS 6.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update

Vendor

Red Hat Product Security

Published

November 14, 2017

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2017-2582 →

📋 Description

CVE-2017-2582 — keycloak: SAML request parser replaces special strings with system properties

🎯 Affected products141

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
hornetq-0:2.3.25-24.SP22_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
hornetq-0:2.3.25-24.SP22_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-appclient-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-appclient-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-cli-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-cli-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-client-all-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-client-all-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-clustering-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-clustering-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-cmp-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-cmp-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-configadmin-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-configadmin-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-connector-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-connector-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-controller-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-controller-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-controller-client-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-controller-client-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-core-security-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-core-security-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-deployment-repository-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-deployment-repository-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-deployment-scanner-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-deployment-scanner-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-domain-http-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-domain-http-0:7.5.18-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
jboss-as-domain-management-0:7.5.18-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
+111 more not shown

✅ Remediation

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products141

✅ Remediation

🔗 References (6)