RHSA-2020:2783HighCVSS 7.6
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.23 security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2019-14885 — EAP: Vault system property security attribute value is revealed on CLI 'reload' command CVE-2020-1938 — tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform 6.4
✅ Remediation
Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The References section of this erratum contains a download link (you must log in to download the update). You must restart the JBoss server process for the update to take effect. Workaround: Please refer to the Red Hat knowledgebase article: https://access.redhat.com/solutions/4851251
🔗 References (13)
- selfhttps://access.redhat.com/errata/RHSA-2020:2783
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1700855
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1708467
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1770615
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1772542
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1806398
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1816579
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1816629
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1819214
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2783.json