RHSA-2019:1159MediumCVSS 5.4

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.22 security update

Published
May 13, 2019
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2018-8034 →CVE-2018-10934 →CVE-2018-1000632 →

📋 Description

CVE-2018-8034 — tomcat: Host name verification missing in WebSocket client CVE-2018-10934 — wildfly-core: Cross-site scripting (XSS) in JBoss Management Console CVE-2018-1000632 — dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

🎯 Affected products154

  • Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • apache-cxf-0:2.7.18-8.SP7_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • apache-cxf-0:2.7.18-8.SP7_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • dom4j-eap6-0:1.6.1-22.redhat_9.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • dom4j-eap6-0:1.6.1-22.redhat_9.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • hornetq-0:2.3.25-28.SP29_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • hornetq-0:2.3.25-28.SP29_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-common-api-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-common-impl-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-common-spi-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-core-api-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-core-impl-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-deployers-common-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-jdbc-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-spec-api-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • ironjacamar-validator-eap6-0:1.0.43-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-appclient-0:7.5.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-appclient-0:7.5.22-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-cli-0:7.5.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-cli-0:7.5.22-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-client-all-0:7.5.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-client-all-0:7.5.22-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-clustering-0:7.5.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-clustering-0:7.5.22-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-cmp-0:7.5.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-cmp-0:7.5.22-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • jboss-as-configadmin-0:7.5.22-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server
  • +124 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (14)