RHSA-2021:0248HighCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update

Published
January 25, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (6)

CVE-2020-25633 →CVE-2020-25640 →CVE-2020-25689 →CVE-2020-27782 →CVE-2020-27822 →CVE-2020-13956 →

📋 Description

CVE-2020-13956 — apache-httpclient: incorrect handling of malformed authority component in request URIs CVE-2020-25633 — resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling CVE-2020-25640 — wildfly: resource adapter logs plaintext JMS password at warning level on connection error CVE-2020-25689 — wildfly-core: memory leak in WildFly host-controller in domain mode while not able to reconnect to domain-controller CVE-2020-27782 — undertow: special character in query results in server errors CVE-2020-27822 — wildfly: Potential Memory leak in Wildfly when using OpenTracing

🎯 Affected products114

  • Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el8eap.src as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-cli-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-commons-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-core-client-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-dto-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-hornetq-protocol-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-hqclient-protocol-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-jdbc-store-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-jms-client-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-jms-server-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-journal-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-ra-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-selector-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-server-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-service-extensions-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-activemq-artemis-tools-0:2.9.0-7.redhat_00017.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hibernate-core-0:5.3.20-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hibernate-entitymanager-0:5.3.20-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hibernate-envers-0:5.3.20-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-hibernate-java8-0:5.3.20-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.3 for BaseOS-8
  • +84 more not shown

✅ Remediation

Before applying this update, ensure all previously released errata relevant to your system have been applied. For details about how to apply this update, see: https://access.redhat.com/articles/11258 Workaround: The issue can be mitigated by using HTTP/1.1 instead of AJP to proxy to the back-end.

🔗 References (30)