RHSA-2022:5928MediumCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update

Published
August 8, 2022
Last Modified
August 7, 2026

🔗 CVE IDs covered (3)

CVE-2021-44906 →CVE-2022-24823 →CVE-2022-25647 →

📋 Description

CVE-2021-44906 — minimist: prototype pollution CVE-2022-24823 — netty: world readable temporary file containing sensitive data CVE-2022-25647 — com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 7

✅ Remediation

Before applying this update, ensure all previously released errata relevant to your system have been applied. For details about how to apply this update, see: https://access.redhat.com/articles/11258 Workaround: As a workaround, specify one's own `java.io.tmpdir` when starting the JVM or use DefaultHttpDataFactory.setBaseDir(...) to set the directory to something that is only readable by the current user.

🔗 References (33)