What is RHSA-2020:2063?

RHSA-2020:2063 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2 security update

Which CVE IDs does RHSA-2020:2063 cover?

RHSA-2020:2063 covers the following CVE IDs: CVE-2019-10174, CVE-2018-14371. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2020:2063?

RHSA-2020:2063 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2020:2063?

RHSA-2020:2063 affects 39 products, including: Red Hat JBoss EAP 7.2 for RHEL 6 Server; Red Hat JBoss EAP 7.2 for RHEL 7 Server; Red Hat JBoss EAP 7.2 for RHEL 8; eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server; eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server; and others — see the full list on the advisory page.

RHSA-2020:2063HighCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2 security update

Vendor

Red Hat Product Security

Published

May 11, 2020

Last Modified

August 4, 2026

🔗 CVE IDs covered (2)

CVE-2019-10174 →CVE-2018-14371 →

📋 Description

CVE-2018-14371 — mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter CVE-2019-10174 — infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods

🎯 Affected products39

Red Hat JBoss EAP 7.2 for RHEL 6 Server
Red Hat JBoss EAP 7.2 for RHEL 7 Server
Red Hat JBoss EAP 7.2 for RHEL 8
eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-glassfish-jsf-0:2.3.5-11.SP3_redhat_00009.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-infinispan-0:9.3.9-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-infinispan-0:9.3.9-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-infinispan-0:9.3.9-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-infinispan-0:9.3.9-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-infinispan-0:9.3.9-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-infinispan-0:9.3.9-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-infinispan-cachestore-jdbc-0:9.3.9-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-infinispan-cachestore-jdbc-0:9.3.9-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-infinispan-cachestore-jdbc-0:9.3.9-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-infinispan-cachestore-remote-0:9.3.9-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-infinispan-cachestore-remote-0:9.3.9-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-infinispan-cachestore-remote-0:9.3.9-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-infinispan-client-hotrod-0:9.3.9-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-infinispan-client-hotrod-0:9.3.9-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-infinispan-client-hotrod-0:9.3.9-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-infinispan-commons-0:9.3.9-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-infinispan-commons-0:9.3.9-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-infinispan-commons-0:9.3.9-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8
eap7-infinispan-core-0:9.3.9-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 6 Server
eap7-infinispan-core-0:9.3.9-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 7 Server
eap7-infinispan-core-0:9.3.9-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.2 for RHEL 8
+9 more not shown

✅ Remediation

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. You must restart the JBoss server process for the update to take effect. For details about how to apply this update, see: https://access.redhat.com/articles/11258 Workaround: There is no currently known mitigation for this flaw. Workaround: There is no known mitigation for this issue.

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products39

✅ Remediation

🔗 References (7)