Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2018-1067 (GCVE-0-2018-1067)
Vulnerability from cvelistv5 – Published: 2018-05-21 17:00 – Updated: 2024-08-05 03:51
VLAI?
EPSS
Summary
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.
Severity ?
5.4 (Medium)
CWE
Assigner
References
| URL | Tags | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:51:47.329Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2018:1248",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"name": "RHSA-2018:1251",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"name": "RHSA-2018:2643",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
},
{
"name": "RHSA-2018:1247",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"name": "RHSA-2018:1249",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"name": "RHSA-2019:0877",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "undertow",
"vendor": "[UNKNOWN]",
"versions": [
{
"status": "affected",
"version": "undertow 7.1.2.CR1"
},
{
"status": "affected",
"version": "undertow 7.1.2.GA"
}
]
}
],
"datePublic": "2018-03-01T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-113",
"description": "CWE-113",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-04-24T21:06:04",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2018:1248",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"name": "RHSA-2018:1251",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"name": "RHSA-2018:2643",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
},
{
"name": "RHSA-2018:1247",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"name": "RHSA-2018:1249",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"name": "RHSA-2019:0877",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2018-1067",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "undertow",
"version": {
"version_data": [
{
"version_value": "undertow 7.1.2.CR1"
},
{
"version_value": "undertow 7.1.2.GA"
}
]
}
}
]
},
"vendor_name": "[UNKNOWN]"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value."
}
]
},
"impact": {
"cvss": [
[
{
"vectorString": "5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
}
],
[
{
"vectorString": "5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
}
]
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-113"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:1248",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"name": "RHSA-2018:1251",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"name": "RHSA-2018:2643",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
},
{
"name": "RHSA-2018:1247",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"name": "RHSA-2018:1249",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"name": "RHSA-2019:0877",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2018-1067",
"datePublished": "2018-05-21T17:00:00",
"dateReserved": "2017-12-04T00:00:00",
"dateUpdated": "2024-08-05T03:51:47.329Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.4.25\", \"matchCriteriaId\": \"8B6F497B-67CA-4155-8DEC-802FE17B011C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.0.0\", \"versionEndExcluding\": \"2.0.5\", \"matchCriteriaId\": \"B6639249-46A5-41DC-B268-178188CB5816\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7117F117-D439-45EB-BB95-397E5E52C9BB\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB28F9AF-3D06-4532-B397-96D7E4792503\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.\"}, {\"lang\": \"es\", \"value\": \"En Undertow, en versiones anteriores a la 7.1.2.CR1, 7.1.2.GA, se descubri\\u00f3 que la soluci\\u00f3n para CVE-2016-4993 no estaba completa. Por lo tanto, el servidor web de Undertow es vulnerable a la inyecci\\u00f3n de cabeceras HTTP arbitrarias y tambi\\u00e9n a la separaci\\u00f3n de respuestas, debido al saneamiento y validaci\\u00f3n insuficientes de entradas de usuario antes de que se empleen como parte de un valor de cabecera HTTP.\"}]",
"id": "CVE-2018-1067",
"lastModified": "2024-11-21T03:59:06.580",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 6.1, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 2.7}], \"cvssMetricV30\": [{\"source\": \"secalert@redhat.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 2.5}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:N\", \"baseScore\": 5.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 4.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2018-05-21T17:29:00.917",
"references": "[{\"url\": \"https://access.redhat.com/errata/RHSA-2018:1247\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1248\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1249\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1251\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2643\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0877\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1247\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1248\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1249\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:1251\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2018:2643\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:0877\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"secalert@redhat.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-113\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-113\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2018-1067\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2018-05-21T17:29:00.917\",\"lastModified\":\"2024-11-21T03:59:06.580\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.\"},{\"lang\":\"es\",\"value\":\"En Undertow, en versiones anteriores a la 7.1.2.CR1, 7.1.2.GA, se descubri\u00f3 que la soluci\u00f3n para CVE-2016-4993 no estaba completa. Por lo tanto, el servidor web de Undertow es vulnerable a la inyecci\u00f3n de cabeceras HTTP arbitrarias y tambi\u00e9n a la separaci\u00f3n de respuestas, debido al saneamiento y validaci\u00f3n insuficientes de entradas de usuario antes de que se empleen como parte de un valor de cabecera HTTP.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}],\"cvssMetricV30\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.5}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:N\",\"baseScore\":5.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-113\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-113\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.4.25\",\"matchCriteriaId\":\"8B6F497B-67CA-4155-8DEC-802FE17B011C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.0.0\",\"versionEndExcluding\":\"2.0.5\",\"matchCriteriaId\":\"B6639249-46A5-41DC-B268-178188CB5816\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7117F117-D439-45EB-BB95-397E5E52C9BB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB28F9AF-3D06-4532-B397-96D7E4792503\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1247\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1248\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1249\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1251\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2643\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0877\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1247\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1248\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1249\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1251\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2643\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:0877\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]}]}}"
}
}
RHSA-2020:2562
Vulnerability from csaf_redhat - Published: 2020-06-15 16:13 - Updated: 2025-11-21 18:14Summary
Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 13 security update
Notes
Topic
This is a security update for JBoss EAP Continuous Delivery 13.0.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform CD13 is a platform for Java applications based on the WildFly application runtime.
This release of Red Hat JBoss Enterprise Application Platform CD13 includes bug fixes and enhancements.
Security Fix(es):
* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries (CVE-2018-7489)
* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)
* undertow: client can use bogus uri in digest authentication (CVE-2017-12196)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is a security update for JBoss EAP Continuous Delivery 13.0.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform CD13 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform CD13 includes bug fixes and enhancements. \n\nSecurity Fix(es):\n\n* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n* jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries (CVE-2018-7489)\n* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)\n* undertow: client can use bogus uri in digest authentication (CVE-2017-12196)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2562",
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1503055",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503055"
},
{
"category": "external",
"summary": "1549276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549276"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2562.json"
}
],
"title": "Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 13 security update",
"tracking": {
"current_release_date": "2025-11-21T18:14:55+00:00",
"generator": {
"date": "2025-11-21T18:14:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2020:2562",
"initial_release_date": "2020-06-15T16:13:47+00:00",
"revision_history": [
{
"date": "2020-06-15T16:13:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-15T16:13:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:14:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
"product_id": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform_cd:13"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jan Stourac"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2017-12196",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2017-10-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1503055"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Client can use bogus uri in Digest authentication",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-12196"
},
{
"category": "external",
"summary": "RHBZ#1503055",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503055"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-12196",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12196"
}
],
"release_date": "2018-03-12T15:56:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Client can use bogus uri in Digest authentication"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"cve": "CVE-2018-7489",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1549276"
}
],
"notes": [
{
"category": "description",
"text": "FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates.\n\nSatellite 6.2 does not support c3p0 classes. Since the latter are required for this flaw, therefore Satellite 6.2 is not affected. Satellite 6.3 and 6.4 are not affected because Candlepin does not use polymorphic deserialization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-7489"
},
{
"category": "external",
"summary": "RHBZ#1549276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549276"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-7489",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7489"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7489",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7489"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/3442891",
"url": "https://access.redhat.com/solutions/3442891"
}
],
"release_date": "2018-02-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
},
{
"category": "workaround",
"details": "Advice on how to remain safe while using JAX-RS webservices on JBoss EAP 7.x is available here:\n\nhttps://access.redhat.com/solutions/3279231\nhttps://github.com/FasterXML/jackson-docs/wiki/JacksonPolymorphicDeserialization\n\nGeneral Mitigation: \nTry to avoid \n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries"
},
{
"cve": "CVE-2018-10237",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2018-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573391"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Guava where the AtomicDoubleArray and CompoundOrdering classes were found to allocate memory based on size fields sent by the client without validation. A crafted message could cause the server to consume all available memory or crash leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Openshift Application Runtimes: Eclipse Vert.x is not exploitable by this flaw, though the vulnerable code is a transient dependency to the product. This issue may be addressed in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10237"
},
{
"category": "external",
"summary": "RHBZ#1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10237",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://github.com/google/guava/wiki/CVE-2018-10237",
"url": "https://github.com/google/guava/wiki/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion",
"url": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion"
}
],
"release_date": "2018-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service"
},
{
"cve": "CVE-2018-10862",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1593527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability can only be exploited by users with deployment permissions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10862"
},
{
"category": "external",
"summary": "RHBZ#1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10862",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862"
},
{
"category": "external",
"summary": "https://snyk.io/research/zip-slip-vulnerability",
"url": "https://snyk.io/research/zip-slip-vulnerability"
}
],
"release_date": "2018-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)"
}
]
}
RHSA-2018_1251
Vulnerability from csaf_redhat - Published: 2018-04-25 19:43 - Updated: 2024-11-25 12:10Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.2 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2, fixes several bugs, and adds various enhancements are now available for Red Hat Enterprise Linux.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.
This release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2, fixes several bugs, and adds various enhancements are now available for Red Hat Enterprise Linux.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1251",
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=7.1",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=7.1"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1251.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.2 security update",
"tracking": {
"current_release_date": "2024-11-25T12:10:31+00:00",
"generator": {
"date": "2024-11-25T12:10:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1251",
"initial_release_date": "2018-04-25T19:43:26+00:00",
"revision_history": [
{
"date": "2018-04-25T19:43:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T19:43:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-25T12:10:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss EAP 7.1",
"product": {
"name": "Red Hat JBoss EAP 7.1",
"product_id": "Red Hat JBoss EAP 7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss EAP 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T19:43:26+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss EAP 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss EAP 7.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss EAP 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T19:43:26+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss EAP 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss EAP 7.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss EAP 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T19:43:26+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss EAP 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss EAP 7.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
RHSA-2018:1248
Vulnerability from csaf_redhat - Published: 2018-04-25 18:21 - Updated: 2025-11-21 18:04Summary
Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.
This release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1248",
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "JBEAP-14135",
"url": "https://issues.redhat.com/browse/JBEAP-14135"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1248.json"
}
],
"title": "Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6",
"tracking": {
"current_release_date": "2025-11-21T18:04:31+00:00",
"generator": {
"date": "2025-11-21T18:04:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2018:1248",
"initial_release_date": "2018-04-25T18:21:23+00:00",
"revision_history": [
{
"date": "2018-04-25T18:21:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T18:21:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:04:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling-river@2.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox-infinispan@5.0.3-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-client-hotrod@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-commons@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-core@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-jdbc@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-remote@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-jsf@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-impl@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-probe-core@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-core@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-java8@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-envers@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-infinispan@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-native@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-service-extensions@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-journal@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hornetq-protocol@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-selector@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-server@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-dto@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-client@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-core-client@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-commons@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hqclient-protocol@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-server@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-cli@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-ra@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jdbc-store@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:23+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:23+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:23+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
RHSA-2018:1247
Vulnerability from csaf_redhat - Published: 2018-04-25 18:21 - Updated: 2025-11-21 18:04Summary
Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 for RHEL 7
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java
applications based on the JBoss Application Server.
This release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class
(CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java\napplications based on the JBoss Application Server.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class\n(CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1247",
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "JBEAP-14136",
"url": "https://issues.redhat.com/browse/JBEAP-14136"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1247.json"
}
],
"title": "Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 for RHEL 7",
"tracking": {
"current_release_date": "2025-11-21T18:04:30+00:00",
"generator": {
"date": "2025-11-21T18:04:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2018:1247",
"initial_release_date": "2018-04-25T18:21:36+00:00",
"revision_history": [
{
"date": "2018-04-25T18:21:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T18:21:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:04:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling-river@2.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox-infinispan@5.0.3-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-client-hotrod@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-commons@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-core@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-jdbc@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-remote@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-jsf@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-probe-core@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-impl@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-core@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-envers@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-infinispan@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-java8@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hqclient-protocol@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hornetq-protocol@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-server@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-selector@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-dto@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-native@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-client@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-core-client@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-journal@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-service-extensions@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-cli@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-server@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-ra@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jdbc-store@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-commons@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
RHSA-2018:1249
Vulnerability from csaf_redhat - Published: 2018-04-25 18:33 - Updated: 2025-11-21 18:04Summary
Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.2
Notes
Topic
An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).
With this update, the eap7-jboss-ec2-eap package has been updated to ensure
compatibility with Red Hat JBoss Enterprise Application Platform 7.1.2.
Refer to the JBoss Enterprise Application Platform 7.1 Release Notes, linked to in the References section, for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix
of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class
(CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).\n\nWith this update, the eap7-jboss-ec2-eap package has been updated to ensure\ncompatibility with Red Hat JBoss Enterprise Application Platform 7.1.2.\n\nRefer to the JBoss Enterprise Application Platform 7.1 Release Notes, linked to in the References section, for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix\nof CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class\n(CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1249",
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "JBEAP-14137",
"url": "https://issues.redhat.com/browse/JBEAP-14137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1249.json"
}
],
"title": "Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.2",
"tracking": {
"current_release_date": "2025-11-21T18:04:31+00:00",
"generator": {
"date": "2025-11-21T18:04:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2018:1249",
"initial_release_date": "2018-04-25T18:33:41+00:00",
"revision_history": [
{
"date": "2018-04-25T18:33:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T18:33:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:04:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_id": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap-samples@7.1.2-1.GA_redhat_1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_id": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap-samples@7.1.2-1.GA_redhat_1.ep7.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:33:41+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:33:41+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:33:41+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
RHSA-2018:2643
Vulnerability from csaf_redhat - Published: 2018-09-04 14:10 - Updated: 2025-11-21 18:06Summary
Red Hat Security Advisory: rhvm-appliance security update
Notes
Topic
An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal.
The following packages have been upgraded to a later upstream version: rhvm-appliance (4.2). (BZ#1590658, BZ#1591095, BZ#1591096, BZ#1592655, BZ#1594636, BZ#1597534, BZ#1612683)
Red Hat would like to thank the PostgreSQL project for reporting CVE-2018-10915 and Ammarit Thongthua (Deloitte Thailand Pentest team) and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067. Upstream acknowledges Andrew Krasichkov as the original reporter of CVE-2018-10915.
Security fixes:
* vulnerability: wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)
* vulnerability: apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* (CVE-2018-8039)
* vulnerability: postgresql: Certain host connection parameters defeat client-side security defenses (CVE-2018-10915)
* vulnerability: undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of ) (CVE-2018-1067, CVE-2016-4993)
* vulnerability: undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)
* vulnerability: guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)
* vulnerability: bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)
For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal.\n\nThe following packages have been upgraded to a later upstream version: rhvm-appliance (4.2). (BZ#1590658, BZ#1591095, BZ#1591096, BZ#1592655, BZ#1594636, BZ#1597534, BZ#1612683)\n\nRed Hat would like to thank the PostgreSQL project for reporting CVE-2018-10915 and Ammarit Thongthua (Deloitte Thailand Pentest team) and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067. Upstream acknowledges Andrew Krasichkov as the original reporter of CVE-2018-10915.\n\nSecurity fixes:\n\n* vulnerability: wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)\n\n* vulnerability: apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* (CVE-2018-8039)\n\n* vulnerability: postgresql: Certain host connection parameters defeat client-side security defenses (CVE-2018-10915)\n\n* vulnerability: undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of ) (CVE-2018-1067, CVE-2016-4993)\n\n* vulnerability: undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)\n\n* vulnerability: guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)\n\n* vulnerability: bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)\n\nFor more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2643",
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "1595332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595332"
},
{
"category": "external",
"summary": "1609891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609891"
},
{
"category": "external",
"summary": "1616249",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616249"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2643.json"
}
],
"title": "Red Hat Security Advisory: rhvm-appliance security update",
"tracking": {
"current_release_date": "2025-11-21T18:06:00+00:00",
"generator": {
"date": "2025-11-21T18:06:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2018:2643",
"initial_release_date": "2018-09-04T14:10:19+00:00",
"revision_history": [
{
"date": "2018-09-04T14:10:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-09-04T14:10:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:06:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product": {
"name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product_id": "7Server-RHEV-4-Agents-7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
},
{
"category": "product_name",
"name": "Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product": {
"name": "Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product_id": "7Server-RHEV-4-Hypervisor-7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"product": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"product_id": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhvm-appliance@4.2-20180828.0.el7?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"product": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"product_id": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhvm-appliance@4.2-20180828.0.el7?arch=noarch\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product_id": "7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"relates_to_product_reference": "7Server-RHEV-4-Agents-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product_id": "7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"relates_to_product_reference": "7Server-RHEV-4-Agents-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product_id": "7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"relates_to_product_reference": "7Server-RHEV-4-Hypervisor-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product_id": "7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"relates_to_product_reference": "7Server-RHEV-4-Hypervisor-7"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"cve": "CVE-2018-1114",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-04-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573045"
}
],
"notes": [
{
"category": "description",
"text": "It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1114"
},
{
"category": "external",
"summary": "RHBZ#1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1114",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114"
},
{
"category": "external",
"summary": "https://bugs.openjdk.java.net/browse/JDK-6956385",
"url": "https://bugs.openjdk.java.net/browse/JDK-6956385"
},
{
"category": "external",
"summary": "https://issues.jboss.org/browse/UNDERTOW-1338",
"url": "https://issues.jboss.org/browse/UNDERTOW-1338"
}
],
"release_date": "2018-04-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service"
},
{
"cve": "CVE-2018-8039",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2018-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1595332"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that when Apache CXF is configured to use the system property com.sun.net.ssl.internal.www.protocol ,it uses reflection to make the HostnameVerifier work with old com.sun.net.ssl.HostnameVerifier interface. Although the CXF implementation throws an exception, which is caught in the reflection code but it is not properly propagated, this can lead to a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Logging the openshift-logging/elasticsearch6-rhel8 container bundles the vulnerable version of apache-cxf, but the vulnerable class is not shipped, hence this component is not affected by this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8039"
},
{
"category": "external",
"summary": "RHBZ#1595332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8039",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8039"
},
{
"category": "external",
"summary": "http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1\u0026modificationDate=1530184663000\u0026api=v2",
"url": "http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1\u0026modificationDate=1530184663000\u0026api=v2"
}
],
"release_date": "2018-06-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*"
},
{
"cve": "CVE-2018-10237",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2018-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573391"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Guava where the AtomicDoubleArray and CompoundOrdering classes were found to allocate memory based on size fields sent by the client without validation. A crafted message could cause the server to consume all available memory or crash leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Openshift Application Runtimes: Eclipse Vert.x is not exploitable by this flaw, though the vulnerable code is a transient dependency to the product. This issue may be addressed in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10237"
},
{
"category": "external",
"summary": "RHBZ#1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10237",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://github.com/google/guava/wiki/CVE-2018-10237",
"url": "https://github.com/google/guava/wiki/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion",
"url": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion"
}
],
"release_date": "2018-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service"
},
{
"cve": "CVE-2018-10862",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1593527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability can only be exploited by users with deployment permissions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10862"
},
{
"category": "external",
"summary": "RHBZ#1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10862",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862"
},
{
"category": "external",
"summary": "https://snyk.io/research/zip-slip-vulnerability",
"url": "https://snyk.io/research/zip-slip-vulnerability"
}
],
"release_date": "2018-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)"
},
{
"acknowledgments": [
{
"names": [
"the PostgreSQL project"
]
},
{
"names": [
"Andrew Krasichkov"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2018-10915",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2018-07-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1609891"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq were used with \"host\" or \"hostaddr\" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: Certain host connection parameters defeat client-side security defenses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is only exploitable where an attacker can provide or influence connection parameters to a PostgreSQL client application using libpq. Contrib modules \"dblink\" and \"postgres_fdw\" are examples of applications affected by this flaw.\n\nRed Hat Virtualization includes vulnerable versions of postgresql. However this flaw is not known to be exploitable under any supported configuration of Red Hat Virtualization. A future update may address this issue.\n\nThis issue affects the versions of the rh-postgresql95-postgresql package as shipped with Red Hat Satellite 5.7 and 5.8. However, this flaw is not known to be exploitable under any supported scenario in Satellite 5. A future update may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10915"
},
{
"category": "external",
"summary": "RHBZ#1609891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609891"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10915",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10915"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10915",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10915"
},
{
"category": "external",
"summary": "https://www.postgresql.org/about/news/1878/",
"url": "https://www.postgresql.org/about/news/1878/"
}
],
"release_date": "2018-08-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: Certain host connection parameters defeat client-side security defenses"
},
{
"cve": "CVE-2018-1000180",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2018-06-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1588306"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in BouncyCastle. The number of iterations of the Miller-Rabin primality test was incorrectly calculated (according to FIPS 186-4 C.3). Under some circumstances, this could lead to the generation of weak RSA key pairs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: flaw in the low-level interface to RSA key pair generator",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of bouncycastle as shipped with Red Hat Subscription Asset Manager 1.x. Red Hat Product Security has rated this issue as having a security impact of Moderate. No update is planned for this product at this time. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.\n\nRed Hat Satellite 6.5 isn\u0027t vulnerable to this issue, since it doesn\u0027t ship bouncycastle jar file anymore.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1000180"
},
{
"category": "external",
"summary": "RHBZ#1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000180",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180"
}
],
"release_date": "2018-04-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bouncycastle: flaw in the low-level interface to RSA key pair generator"
}
]
}
RHSA-2018_1248
Vulnerability from csaf_redhat - Published: 2018-04-25 18:21 - Updated: 2024-11-25 12:10Summary
Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.
This release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1248",
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "JBEAP-14135",
"url": "https://issues.redhat.com/browse/JBEAP-14135"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1248.json"
}
],
"title": "Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6",
"tracking": {
"current_release_date": "2024-11-25T12:10:00+00:00",
"generator": {
"date": "2024-11-25T12:10:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1248",
"initial_release_date": "2018-04-25T18:21:23+00:00",
"revision_history": [
{
"date": "2018-04-25T18:21:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T18:21:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-25T12:10:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling-river@2.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox-infinispan@5.0.3-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-client-hotrod@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-commons@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-core@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-jdbc@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-remote@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-jsf@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-impl@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-probe-core@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-core@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-java8@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-envers@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-infinispan@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-native@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-service-extensions@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-journal@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hornetq-protocol@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-selector@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-server@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-dto@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-client@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-core-client@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-commons@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hqclient-protocol@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-server@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-cli@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-ra@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jdbc-store@1.5.5.010-1.redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:23+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:23+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:23+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
RHSA-2018_1247
Vulnerability from csaf_redhat - Published: 2018-04-25 18:21 - Updated: 2024-11-25 12:10Summary
Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 for RHEL 7
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java
applications based on the JBoss Application Server.
This release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class
(CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java\napplications based on the JBoss Application Server.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class\n(CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1247",
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "JBEAP-14136",
"url": "https://issues.redhat.com/browse/JBEAP-14136"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1247.json"
}
],
"title": "Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 for RHEL 7",
"tracking": {
"current_release_date": "2024-11-25T12:10:07+00:00",
"generator": {
"date": "2024-11-25T12:10:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1247",
"initial_release_date": "2018-04-25T18:21:36+00:00",
"revision_history": [
{
"date": "2018-04-25T18:21:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T18:21:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-25T12:10:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling@2.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-marshalling-river@2.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-5.SP5_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-jsf-api_2.2_spec@2.2.13-5.SP2_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-xnio-base@3.5.5-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketbox-infinispan@5.0.3-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-weld-2.2-api@2.4.0-3.SP2_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.4.8-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.9-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.6-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jgroups@3.6.14-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-client-hotrod@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-commons@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-core@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-jdbc@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-infinispan-cachestore-remote@8.2.10-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-mod_cluster@1.3.9-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-jsf@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-probe-core@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core-impl@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-weld-core@2.4.7-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"product_id": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.16-2.Final_redhat_1.2.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-core@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-envers@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-infinispan@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-hibernate-java8@5.1.13-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0-to-eap7.1@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.0.4-1.Final_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-11.SP10_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hqclient-protocol@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-hornetq-protocol@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-server@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-selector@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-dto@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-native@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-client@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-core-client@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-journal@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-service-extensions@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-cli@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jms-server@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-ra@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-jdbc-store@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-activemq-artemis-commons@1.5.5.010-1.redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_id": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.1.2-1.GA_redhat_1.1.ep7.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src"
},
"product_reference": "eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
},
"product_reference": "eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:21:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-commons-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-infinispan-core-0:8.2.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-0:1.4.8-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-common-spi-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-api-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-core-impl-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-deployers-common-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-jdbc-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-ironjacamar-validator-0:1.4.8-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ejb-client-0:4.0.10-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-jsf-api_2.2_spec-0:2.2.13-5.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-0:2.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-marshalling-river-0:2.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-0:1.0.4-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-cli-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-core-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap6.4-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly10.1-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly8.2-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.0-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-server-migration-wildfly9.0-to-eap7.1-0:1.0.4-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-weld-2.2-api-0:2.4.0-3.SP2_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-xnio-base-0:3.5.5-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jgroups-0:3.6.14-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-mod_cluster-0:1.3.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketbox-0:5.0.3-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketbox-infinispan-0:5.0.3-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-bindings-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-common-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-config-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-federation-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-picketlink-idm-api-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-idm-simple-schema-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-impl-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-picketlink-wildfly8-0:2.5.5-11.SP10_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-undertow-0:1.4.18-5.SP5_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-weld-core-impl-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-core-jsf-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-weld-probe-core-0:2.4.7-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-0:1.1.9-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-elytron-tool-0:1.0.6-1.Final_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-javadocs-0:7.1.2-1.GA_redhat_1.1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-wildfly-modules-0:7.1.2-1.GA_redhat_1.1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-wildfly-web-console-eap-0:2.9.16-2.Final_redhat_1.2.ep7.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
RHSA-2018:1251
Vulnerability from csaf_redhat - Published: 2018-04-25 19:43 - Updated: 2025-11-21 18:04Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.2 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2, fixes several bugs, and adds various enhancements are now available for Red Hat Enterprise Linux.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.
This release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2, fixes several bugs, and adds various enhancements are now available for Red Hat Enterprise Linux.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.1.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class (CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1251",
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=7.1",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=7.1"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1251.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.2 security update",
"tracking": {
"current_release_date": "2025-11-21T18:04:31+00:00",
"generator": {
"date": "2025-11-21T18:04:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2018:1251",
"initial_release_date": "2018-04-25T19:43:26+00:00",
"revision_history": [
{
"date": "2018-04-25T19:43:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T19:43:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:04:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss EAP 7.1",
"product": {
"name": "Red Hat JBoss EAP 7.1",
"product_id": "Red Hat JBoss EAP 7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss EAP 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T19:43:26+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss EAP 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss EAP 7.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss EAP 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T19:43:26+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss EAP 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss EAP 7.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss EAP 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T19:43:26+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).\n\nThe JBoss server process must be restarted for the update to take effect.",
"product_ids": [
"Red Hat JBoss EAP 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss EAP 7.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
RHSA-2020_2562
Vulnerability from csaf_redhat - Published: 2020-06-15 16:13 - Updated: 2024-11-15 03:23Summary
Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 13 security update
Notes
Topic
This is a security update for JBoss EAP Continuous Delivery 13.0.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Enterprise Application Platform CD13 is a platform for Java applications based on the WildFly application runtime.
This release of Red Hat JBoss Enterprise Application Platform CD13 includes bug fixes and enhancements.
Security Fix(es):
* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries (CVE-2018-7489)
* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)
* undertow: client can use bogus uri in digest authentication (CVE-2017-12196)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is a security update for JBoss EAP Continuous Delivery 13.0.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform CD13 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform CD13 includes bug fixes and enhancements. \n\nSecurity Fix(es):\n\n* guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n* jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries (CVE-2018-7489)\n* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)\n* undertow: client can use bogus uri in digest authentication (CVE-2017-12196)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:2562",
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1503055",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503055"
},
{
"category": "external",
"summary": "1549276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549276"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2562.json"
}
],
"title": "Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 13 security update",
"tracking": {
"current_release_date": "2024-11-15T03:23:30+00:00",
"generator": {
"date": "2024-11-15T03:23:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2020:2562",
"initial_release_date": "2020-06-15T16:13:47+00:00",
"revision_history": [
{
"date": "2020-06-15T16:13:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-06-15T16:13:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T03:23:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
"product_id": "Red Hat JBoss Enterprise Application Platform Continuous Delivery",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform_cd:13"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jan Stourac"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2017-12196",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2017-10-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1503055"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Client can use bogus uri in Digest authentication",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-12196"
},
{
"category": "external",
"summary": "RHBZ#1503055",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503055"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-12196",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12196"
}
],
"release_date": "2018-03-12T15:56:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Client can use bogus uri in Digest authentication"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"cve": "CVE-2018-7489",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1549276"
}
],
"notes": [
{
"category": "description",
"text": "FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates.\n\nSatellite 6.2 does not support c3p0 classes. Since the latter are required for this flaw, therefore Satellite 6.2 is not affected. Satellite 6.3 and 6.4 are not affected because Candlepin does not use polymorphic deserialization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-7489"
},
{
"category": "external",
"summary": "RHBZ#1549276",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549276"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-7489",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7489"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7489",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7489"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/3442891",
"url": "https://access.redhat.com/solutions/3442891"
}
],
"release_date": "2018-02-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
},
{
"category": "workaround",
"details": "Advice on how to remain safe while using JAX-RS webservices on JBoss EAP 7.x is available here:\n\nhttps://access.redhat.com/solutions/3279231\nhttps://github.com/FasterXML/jackson-docs/wiki/JacksonPolymorphicDeserialization\n\nGeneral Mitigation: \nTry to avoid \n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries"
},
{
"cve": "CVE-2018-10237",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2018-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573391"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Guava where the AtomicDoubleArray and CompoundOrdering classes were found to allocate memory based on size fields sent by the client without validation. A crafted message could cause the server to consume all available memory or crash leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Openshift Application Runtimes: Eclipse Vert.x is not exploitable by this flaw, though the vulnerable code is a transient dependency to the product. This issue may be addressed in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10237"
},
{
"category": "external",
"summary": "RHBZ#1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10237",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://github.com/google/guava/wiki/CVE-2018-10237",
"url": "https://github.com/google/guava/wiki/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion",
"url": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion"
}
],
"release_date": "2018-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service"
},
{
"cve": "CVE-2018-10862",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1593527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability can only be exploited by users with deployment permissions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10862"
},
{
"category": "external",
"summary": "RHBZ#1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10862",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862"
},
{
"category": "external",
"summary": "https://snyk.io/research/zip-slip-vulnerability",
"url": "https://snyk.io/research/zip-slip-vulnerability"
}
],
"release_date": "2018-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-06-15T16:13:47+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nYou must restart the JBoss server process for the update to take effect.\n\nThe References section of this erratum contains a download link (you must log in to download the update)",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:2562"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform Continuous Delivery"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)"
}
]
}
RHSA-2019:0877
Vulnerability from csaf_redhat - Published: 2019-04-24 18:46 - Updated: 2025-11-21 18:08Summary
Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Thorntail 2.4.0 security & bug fix update
Notes
Topic
An update is now available for Red Hat OpenShift Application Runtimes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Application Runtimes provides an application platform that reduces the complexity of developing and operating applications (monoliths and microservices) for OpenShift as a containerized platform.
This release of RHOAR Thorntail 2.4.0 serves as a replacement for RHOAR Thorntail 2.2.0, and includes security and bug fixes and enhancements. For further information, refer to the release notes linked to in the References section.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* keycloak: auth permitted with expired certs in SAML client (CVE-2018-10894)
* undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)
* keycloak: infinite loop in session replacement leading to denial of service (CVE-2018-10912)
* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)
* jackson-databind: arbitrary code execution in slf4j-ext class (CVE-2018-14718)
* jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes (CVE-2018-14719)
* jackson-databind: improper polymorphic deserialization in axis2-transport-jms class (CVE-2018-19360)
* jackson-databind: improper polymorphic deserialization in openjpa class (CVE-2018-19361)
* jackson-databind: improper polymorphic deserialization in jboss-common-core class (CVE-2018-19362)
* jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver (CVE-2018-12023)
* jackson-databind: improper polymorphic deserialization of types from Jodd-db library (CVE-2018-12022)
* jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis (CVE-2018-11307)
* bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)
For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenShift Application Runtimes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Application Runtimes provides an application platform that reduces the complexity of developing and operating applications (monoliths and microservices) for OpenShift as a containerized platform.\n\nThis release of RHOAR Thorntail 2.4.0 serves as a replacement for RHOAR Thorntail 2.2.0, and includes security and bug fixes and enhancements. For further information, refer to the release notes linked to in the References section.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* keycloak: auth permitted with expired certs in SAML client (CVE-2018-10894)\n\n* undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)\n\n* keycloak: infinite loop in session replacement leading to denial of service (CVE-2018-10912)\n\n* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)\n\n* jackson-databind: arbitrary code execution in slf4j-ext class (CVE-2018-14718)\n\n* jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes (CVE-2018-14719)\n\n* jackson-databind: improper polymorphic deserialization in axis2-transport-jms class (CVE-2018-19360)\n\n* jackson-databind: improper polymorphic deserialization in openjpa class (CVE-2018-19361)\n\n* jackson-databind: improper polymorphic deserialization in jboss-common-core class (CVE-2018-19362)\n\n* jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver (CVE-2018-12023)\n\n* jackson-databind: improper polymorphic deserialization of types from Jodd-db library (CVE-2018-12022)\n\n* jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis (CVE-2018-11307)\n\n* bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, and other related information, refer to the CVE page(s) listed in\nthe References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:0877",
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=catRhoar.thorntail\u0026version=2.4.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=catRhoar.thorntail\u0026version=2.4.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_openshift_application_runtimes/1/html-single/rhoar_thorntail_release_notes/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_application_runtimes/1/html-single/rhoar_thorntail_release_notes/"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "1599434",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599434"
},
{
"category": "external",
"summary": "1607624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1607624"
},
{
"category": "external",
"summary": "1666415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666415"
},
{
"category": "external",
"summary": "1666418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666418"
},
{
"category": "external",
"summary": "1666482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666482"
},
{
"category": "external",
"summary": "1666484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666484"
},
{
"category": "external",
"summary": "1666489",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666489"
},
{
"category": "external",
"summary": "1671096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671096"
},
{
"category": "external",
"summary": "1671097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671097"
},
{
"category": "external",
"summary": "1677341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1677341"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0877.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Thorntail 2.4.0 security \u0026 bug fix update",
"tracking": {
"current_release_date": "2025-11-21T18:08:00+00:00",
"generator": {
"date": "2025-11-21T18:08:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2019:0877",
"initial_release_date": "2019-04-24T18:46:31+00:00",
"revision_history": [
{
"date": "2019-04-24T18:46:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-04-24T18:46:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:08:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Text-Only RHOAR",
"product": {
"name": "Text-Only RHOAR",
"product_id": "Text-Only RHOAR",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_application_runtimes:1.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Application Runtimes"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"cve": "CVE-2018-1114",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-04-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573045"
}
],
"notes": [
{
"category": "description",
"text": "It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1114"
},
{
"category": "external",
"summary": "RHBZ#1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1114",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114"
},
{
"category": "external",
"summary": "https://bugs.openjdk.java.net/browse/JDK-6956385",
"url": "https://bugs.openjdk.java.net/browse/JDK-6956385"
},
{
"category": "external",
"summary": "https://issues.jboss.org/browse/UNDERTOW-1338",
"url": "https://issues.jboss.org/browse/UNDERTOW-1338"
}
],
"release_date": "2018-04-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service"
},
{
"cve": "CVE-2018-10862",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1593527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability can only be exploited by users with deployment permissions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10862"
},
{
"category": "external",
"summary": "RHBZ#1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10862",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862"
},
{
"category": "external",
"summary": "https://snyk.io/research/zip-slip-vulnerability",
"url": "https://snyk.io/research/zip-slip-vulnerability"
}
],
"release_date": "2018-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)"
},
{
"acknowledgments": [
{
"names": [
"Benjamin Berg"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-10894",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2018-05-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1599434"
}
],
"notes": [
{
"category": "description",
"text": "It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "keycloak: auth permitted with expired certs in SAML client",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10894"
},
{
"category": "external",
"summary": "RHBZ#1599434",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599434"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10894",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10894"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10894",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10894"
}
],
"release_date": "2018-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "keycloak: auth permitted with expired certs in SAML client"
},
{
"cve": "CVE-2018-10912",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1607624"
}
],
"notes": [
{
"category": "description",
"text": "keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "keycloak: infinite loop in session replacement leading to denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10912"
},
{
"category": "external",
"summary": "RHBZ#1607624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1607624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10912",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10912"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10912",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10912"
}
],
"release_date": "2018-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "keycloak: infinite loop in session replacement leading to denial of service"
},
{
"cve": "CVE-2018-11307",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1677341"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using MyBatis classes when using DefaultTyping. An attacker could use this flaw to achieve content exfiltration and possibly conduct further attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since Candlepin\u0027s java runtime environment does not load MyBatis classes.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not include MyBatis classes.\n\nRed Hat Fuse 6 and 7 are not directly affected by this issue, as although they do ship the vulnerable jackson-databind component, they do not enable polymorphic deserialization or default typing which are required for exploitability. Their impacts have correspondingly been reduced to Moderate. Future updates may address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-11307"
},
{
"category": "external",
"summary": "RHBZ#1677341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1677341"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-11307",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11307"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-11307",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11307"
}
],
"release_date": "2018-05-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis"
},
{
"cve": "CVE-2018-12022",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1671097"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Jodd DB connection classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization of types from Jodd-db library",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since Candlepin\u0027s java runtime environment does not load Jodd classes.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not load Jodd classes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12022"
},
{
"category": "external",
"summary": "RHBZ#1671097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12022",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12022"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12022",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12022"
}
],
"release_date": "2018-05-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization of types from Jodd-db library"
},
{
"cve": "CVE-2018-12023",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1671096"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since Candlepin\u0027s java runtime environment does not load Oracle\u0027s JDBC classes.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not load Oracle\u0027s JDBC classes.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12023"
},
{
"category": "external",
"summary": "RHBZ#1671096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12023",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12023"
}
],
"release_date": "2018-06-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver"
},
{
"cve": "CVE-2018-14718",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666415"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using slf4j classes. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: arbitrary code execution in slf4j-ext class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in jackson-databind involves exploiting CVE-2018-1088 against slf4j, which was fixed in Red Hat products through the errata referenced at https://access.redhat.com/security/cve/cve-2018-8088. Applications that link only slf4j versions including that fix are not vulnerable to this vulnerability.\n\nRed Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t bundle slf4j-ext jar.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-14718"
},
{
"category": "external",
"summary": "RHBZ#1666415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-14718",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-14718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14718"
}
],
"release_date": "2018-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: arbitrary code execution in slf4j-ext class"
},
{
"cve": "CVE-2018-14719",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666418"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using blaze classes. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The following Red Hat products are not affected by this issue as they do not bundle or provide the requisite gadget jars to exploit this vulnerability:\nRed Hat Satellite 6\nRed Hat Enterprise Virtualization 4\nRed Hat Fuse 6, 7, and Fuse Integration Services 2\nRed Hat A-MQ 6",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-14719"
},
{
"category": "external",
"summary": "RHBZ#1666418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666418"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-14719",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14719"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-14719",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14719"
}
],
"release_date": "2018-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes"
},
{
"cve": "CVE-2018-19360",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666482"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the axis2-transport-jms class. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization in axis2-transport-jms class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t include axis2-transport-jms jar.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not include axis2-transport-jms jar.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19360"
},
{
"category": "external",
"summary": "RHBZ#1666482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19360",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19360"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19360",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19360"
}
],
"release_date": "2018-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization in axis2-transport-jms class"
},
{
"cve": "CVE-2018-19361",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the OpenJPA class. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization in openjpa class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t bundle openjpa jar.\n\nRed Hat Virtualization 4 is not affected by this issue, since its candlepin component doesn\u0027t bundle openjpa jar.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19361"
},
{
"category": "external",
"summary": "RHBZ#1666484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19361",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19361"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19361",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19361"
}
],
"release_date": "2018-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization in openjpa class"
},
{
"cve": "CVE-2018-19362",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666489"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the jboss-common-core class. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization in jboss-common-core class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t bundle jboss-common-core jar.\n\nRed Hat Virtualization 4 is not affected by this issue, since its candlepin component doesn\u0027t bundle jboss-common-core jar.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19362"
},
{
"category": "external",
"summary": "RHBZ#1666489",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666489"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19362",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19362"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19362",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19362"
}
],
"release_date": "2018-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization in jboss-common-core class"
},
{
"cve": "CVE-2018-1000180",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2018-06-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1588306"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in BouncyCastle. The number of iterations of the Miller-Rabin primality test was incorrectly calculated (according to FIPS 186-4 C.3). Under some circumstances, this could lead to the generation of weak RSA key pairs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: flaw in the low-level interface to RSA key pair generator",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of bouncycastle as shipped with Red Hat Subscription Asset Manager 1.x. Red Hat Product Security has rated this issue as having a security impact of Moderate. No update is planned for this product at this time. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.\n\nRed Hat Satellite 6.5 isn\u0027t vulnerable to this issue, since it doesn\u0027t ship bouncycastle jar file anymore.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1000180"
},
{
"category": "external",
"summary": "RHBZ#1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000180",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180"
}
],
"release_date": "2018-04-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bouncycastle: flaw in the low-level interface to RSA key pair generator"
}
]
}
RHSA-2018_2643
Vulnerability from csaf_redhat - Published: 2018-09-04 14:10 - Updated: 2024-12-15 18:46Summary
Red Hat Security Advisory: rhvm-appliance security update
Notes
Topic
An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal.
The following packages have been upgraded to a later upstream version: rhvm-appliance (4.2). (BZ#1590658, BZ#1591095, BZ#1591096, BZ#1592655, BZ#1594636, BZ#1597534, BZ#1612683)
Red Hat would like to thank the PostgreSQL project for reporting CVE-2018-10915 and Ammarit Thongthua (Deloitte Thailand Pentest team) and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067. Upstream acknowledges Andrew Krasichkov as the original reporter of CVE-2018-10915.
Security fixes:
* vulnerability: wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)
* vulnerability: apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* (CVE-2018-8039)
* vulnerability: postgresql: Certain host connection parameters defeat client-side security defenses (CVE-2018-10915)
* vulnerability: undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of ) (CVE-2018-1067, CVE-2016-4993)
* vulnerability: undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)
* vulnerability: guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)
* vulnerability: bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)
For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal.\n\nThe following packages have been upgraded to a later upstream version: rhvm-appliance (4.2). (BZ#1590658, BZ#1591095, BZ#1591096, BZ#1592655, BZ#1594636, BZ#1597534, BZ#1612683)\n\nRed Hat would like to thank the PostgreSQL project for reporting CVE-2018-10915 and Ammarit Thongthua (Deloitte Thailand Pentest team) and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067. Upstream acknowledges Andrew Krasichkov as the original reporter of CVE-2018-10915.\n\nSecurity fixes:\n\n* vulnerability: wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)\n\n* vulnerability: apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* (CVE-2018-8039)\n\n* vulnerability: postgresql: Certain host connection parameters defeat client-side security defenses (CVE-2018-10915)\n\n* vulnerability: undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of ) (CVE-2018-1067, CVE-2016-4993)\n\n* vulnerability: undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)\n\n* vulnerability: guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237)\n\n* vulnerability: bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)\n\nFor more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2643",
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "1595332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595332"
},
{
"category": "external",
"summary": "1609891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609891"
},
{
"category": "external",
"summary": "1616249",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616249"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2643.json"
}
],
"title": "Red Hat Security Advisory: rhvm-appliance security update",
"tracking": {
"current_release_date": "2024-12-15T18:46:47+00:00",
"generator": {
"date": "2024-12-15T18:46:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2018:2643",
"initial_release_date": "2018-09-04T14:10:19+00:00",
"revision_history": [
{
"date": "2018-09-04T14:10:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-09-04T14:10:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:46:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product": {
"name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product_id": "7Server-RHEV-4-Agents-7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
},
{
"category": "product_name",
"name": "Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product": {
"name": "Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product_id": "7Server-RHEV-4-Hypervisor-7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"product": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"product_id": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhvm-appliance@4.2-20180828.0.el7?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"product": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"product_id": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhvm-appliance@4.2-20180828.0.el7?arch=noarch\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product_id": "7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"relates_to_product_reference": "7Server-RHEV-4-Agents-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts",
"product_id": "7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"relates_to_product_reference": "7Server-RHEV-4-Agents-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product_id": "7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"relates_to_product_reference": "7Server-RHEV-4-Hypervisor-7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhvm-appliance-2:4.2-20180828.0.el7.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7",
"product_id": "7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
},
"product_reference": "rhvm-appliance-2:4.2-20180828.0.el7.src",
"relates_to_product_reference": "7Server-RHEV-4-Hypervisor-7"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"cve": "CVE-2018-1114",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-04-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573045"
}
],
"notes": [
{
"category": "description",
"text": "It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1114"
},
{
"category": "external",
"summary": "RHBZ#1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1114",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114"
},
{
"category": "external",
"summary": "https://bugs.openjdk.java.net/browse/JDK-6956385",
"url": "https://bugs.openjdk.java.net/browse/JDK-6956385"
},
{
"category": "external",
"summary": "https://issues.jboss.org/browse/UNDERTOW-1338",
"url": "https://issues.jboss.org/browse/UNDERTOW-1338"
}
],
"release_date": "2018-04-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service"
},
{
"cve": "CVE-2018-8039",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2018-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1595332"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that when Apache CXF is configured to use the system property com.sun.net.ssl.internal.www.protocol ,it uses reflection to make the HostnameVerifier work with old com.sun.net.ssl.HostnameVerifier interface. Although the CXF implementation throws an exception, which is caught in the reflection code but it is not properly propagated, this can lead to a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift Logging the openshift-logging/elasticsearch6-rhel8 container bundles the vulnerable version of apache-cxf, but the vulnerable class is not shipped, hence this component is not affected by this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8039"
},
{
"category": "external",
"summary": "RHBZ#1595332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8039",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8039"
},
{
"category": "external",
"summary": "http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1\u0026modificationDate=1530184663000\u0026api=v2",
"url": "http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1\u0026modificationDate=1530184663000\u0026api=v2"
}
],
"release_date": "2018-06-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*"
},
{
"cve": "CVE-2018-10237",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2018-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573391"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Guava where the AtomicDoubleArray and CompoundOrdering classes were found to allocate memory based on size fields sent by the client without validation. A crafted message could cause the server to consume all available memory or crash leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Openshift Application Runtimes: Eclipse Vert.x is not exploitable by this flaw, though the vulnerable code is a transient dependency to the product. This issue may be addressed in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10237"
},
{
"category": "external",
"summary": "RHBZ#1573391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10237",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://github.com/google/guava/wiki/CVE-2018-10237",
"url": "https://github.com/google/guava/wiki/CVE-2018-10237"
},
{
"category": "external",
"summary": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion",
"url": "https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion"
}
],
"release_date": "2018-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service"
},
{
"cve": "CVE-2018-10862",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1593527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability can only be exploited by users with deployment permissions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10862"
},
{
"category": "external",
"summary": "RHBZ#1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10862",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862"
},
{
"category": "external",
"summary": "https://snyk.io/research/zip-slip-vulnerability",
"url": "https://snyk.io/research/zip-slip-vulnerability"
}
],
"release_date": "2018-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)"
},
{
"acknowledgments": [
{
"names": [
"the PostgreSQL project"
]
},
{
"names": [
"Andrew Krasichkov"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2018-10915",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2018-07-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1609891"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq were used with \"host\" or \"hostaddr\" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postgresql: Certain host connection parameters defeat client-side security defenses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is only exploitable where an attacker can provide or influence connection parameters to a PostgreSQL client application using libpq. Contrib modules \"dblink\" and \"postgres_fdw\" are examples of applications affected by this flaw.\n\nRed Hat Virtualization includes vulnerable versions of postgresql. However this flaw is not known to be exploitable under any supported configuration of Red Hat Virtualization. A future update may address this issue.\n\nThis issue affects the versions of the rh-postgresql95-postgresql package as shipped with Red Hat Satellite 5.7 and 5.8. However, this flaw is not known to be exploitable under any supported scenario in Satellite 5. A future update may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10915"
},
{
"category": "external",
"summary": "RHBZ#1609891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609891"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10915",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10915"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10915",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10915"
},
{
"category": "external",
"summary": "https://www.postgresql.org/about/news/1878/",
"url": "https://www.postgresql.org/about/news/1878/"
}
],
"release_date": "2018-08-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "postgresql: Certain host connection parameters defeat client-side security defenses"
},
{
"cve": "CVE-2018-1000180",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2018-06-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1588306"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in BouncyCastle. The number of iterations of the Miller-Rabin primality test was incorrectly calculated (according to FIPS 186-4 C.3). Under some circumstances, this could lead to the generation of weak RSA key pairs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: flaw in the low-level interface to RSA key pair generator",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of bouncycastle as shipped with Red Hat Subscription Asset Manager 1.x. Red Hat Product Security has rated this issue as having a security impact of Moderate. No update is planned for this product at this time. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.\n\nRed Hat Satellite 6.5 isn\u0027t vulnerable to this issue, since it doesn\u0027t ship bouncycastle jar file anymore.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1000180"
},
{
"category": "external",
"summary": "RHBZ#1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000180",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180"
}
],
"release_date": "2018-04-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-04T14:10:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891",
"product_ids": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Agents-7:rhvm-appliance-2:4.2-20180828.0.el7.src",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.noarch",
"7Server-RHEV-4-Hypervisor-7:rhvm-appliance-2:4.2-20180828.0.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bouncycastle: flaw in the low-level interface to RSA key pair generator"
}
]
}
RHSA-2019_0877
Vulnerability from csaf_redhat - Published: 2019-04-24 18:46 - Updated: 2024-12-15 18:52Summary
Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Thorntail 2.4.0 security & bug fix update
Notes
Topic
An update is now available for Red Hat OpenShift Application Runtimes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Application Runtimes provides an application platform that reduces the complexity of developing and operating applications (monoliths and microservices) for OpenShift as a containerized platform.
This release of RHOAR Thorntail 2.4.0 serves as a replacement for RHOAR Thorntail 2.2.0, and includes security and bug fixes and enhancements. For further information, refer to the release notes linked to in the References section.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)
* keycloak: auth permitted with expired certs in SAML client (CVE-2018-10894)
* undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)
* keycloak: infinite loop in session replacement leading to denial of service (CVE-2018-10912)
* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)
* jackson-databind: arbitrary code execution in slf4j-ext class (CVE-2018-14718)
* jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes (CVE-2018-14719)
* jackson-databind: improper polymorphic deserialization in axis2-transport-jms class (CVE-2018-19360)
* jackson-databind: improper polymorphic deserialization in openjpa class (CVE-2018-19361)
* jackson-databind: improper polymorphic deserialization in jboss-common-core class (CVE-2018-19362)
* jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver (CVE-2018-12023)
* jackson-databind: improper polymorphic deserialization of types from Jodd-db library (CVE-2018-12022)
* jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis (CVE-2018-11307)
* bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)
For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenShift Application Runtimes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Application Runtimes provides an application platform that reduces the complexity of developing and operating applications (monoliths and microservices) for OpenShift as a containerized platform.\n\nThis release of RHOAR Thorntail 2.4.0 serves as a replacement for RHOAR Thorntail 2.2.0, and includes security and bug fixes and enhancements. For further information, refer to the release notes linked to in the References section.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) (CVE-2018-1067)\n\n* keycloak: auth permitted with expired certs in SAML client (CVE-2018-10894)\n\n* undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service (CVE-2018-1114)\n\n* keycloak: infinite loop in session replacement leading to denial of service (CVE-2018-10912)\n\n* wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip) (CVE-2018-10862)\n\n* jackson-databind: arbitrary code execution in slf4j-ext class (CVE-2018-14718)\n\n* jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes (CVE-2018-14719)\n\n* jackson-databind: improper polymorphic deserialization in axis2-transport-jms class (CVE-2018-19360)\n\n* jackson-databind: improper polymorphic deserialization in openjpa class (CVE-2018-19361)\n\n* jackson-databind: improper polymorphic deserialization in jboss-common-core class (CVE-2018-19362)\n\n* jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver (CVE-2018-12023)\n\n* jackson-databind: improper polymorphic deserialization of types from Jodd-db library (CVE-2018-12022)\n\n* jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis (CVE-2018-11307)\n\n* bouncycastle: flaw in the low-level interface to RSA key pair generator (CVE-2018-1000180)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, and other related information, refer to the CVE page(s) listed in\nthe References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:0877",
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=catRhoar.thorntail\u0026version=2.4.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=catRhoar.thorntail\u0026version=2.4.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_openshift_application_runtimes/1/html-single/rhoar_thorntail_release_notes/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_application_runtimes/1/html-single/rhoar_thorntail_release_notes/"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "1599434",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599434"
},
{
"category": "external",
"summary": "1607624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1607624"
},
{
"category": "external",
"summary": "1666415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666415"
},
{
"category": "external",
"summary": "1666418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666418"
},
{
"category": "external",
"summary": "1666482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666482"
},
{
"category": "external",
"summary": "1666484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666484"
},
{
"category": "external",
"summary": "1666489",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666489"
},
{
"category": "external",
"summary": "1671096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671096"
},
{
"category": "external",
"summary": "1671097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671097"
},
{
"category": "external",
"summary": "1677341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1677341"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0877.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Thorntail 2.4.0 security \u0026 bug fix update",
"tracking": {
"current_release_date": "2024-12-15T18:52:02+00:00",
"generator": {
"date": "2024-12-15T18:52:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2019:0877",
"initial_release_date": "2019-04-24T18:46:31+00:00",
"revision_history": [
{
"date": "2019-04-24T18:46:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-04-24T18:46:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:52:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Text-Only RHOAR",
"product": {
"name": "Text-Only RHOAR",
"product_id": "Text-Only RHOAR",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_application_runtimes:1.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Application Runtimes"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"cve": "CVE-2018-1114",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-04-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1573045"
}
],
"notes": [
{
"category": "description",
"text": "It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1114"
},
{
"category": "external",
"summary": "RHBZ#1573045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1114",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1114"
},
{
"category": "external",
"summary": "https://bugs.openjdk.java.net/browse/JDK-6956385",
"url": "https://bugs.openjdk.java.net/browse/JDK-6956385"
},
{
"category": "external",
"summary": "https://issues.jboss.org/browse/UNDERTOW-1338",
"url": "https://issues.jboss.org/browse/UNDERTOW-1338"
}
],
"release_date": "2018-04-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service"
},
{
"cve": "CVE-2018-10862",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1593527"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability can only be exploited by users with deployment permissions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10862"
},
{
"category": "external",
"summary": "RHBZ#1593527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10862",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10862"
},
{
"category": "external",
"summary": "https://snyk.io/research/zip-slip-vulnerability",
"url": "https://snyk.io/research/zip-slip-vulnerability"
}
],
"release_date": "2018-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)"
},
{
"acknowledgments": [
{
"names": [
"Benjamin Berg"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2018-10894",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2018-05-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1599434"
}
],
"notes": [
{
"category": "description",
"text": "It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "keycloak: auth permitted with expired certs in SAML client",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10894"
},
{
"category": "external",
"summary": "RHBZ#1599434",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599434"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10894",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10894"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10894",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10894"
}
],
"release_date": "2018-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "keycloak: auth permitted with expired certs in SAML client"
},
{
"cve": "CVE-2018-10912",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-05-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1607624"
}
],
"notes": [
{
"category": "description",
"text": "keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "keycloak: infinite loop in session replacement leading to denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10912"
},
{
"category": "external",
"summary": "RHBZ#1607624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1607624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10912",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10912"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10912",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10912"
}
],
"release_date": "2018-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "keycloak: infinite loop in session replacement leading to denial of service"
},
{
"cve": "CVE-2018-11307",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-02-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1677341"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using MyBatis classes when using DefaultTyping. An attacker could use this flaw to achieve content exfiltration and possibly conduct further attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since Candlepin\u0027s java runtime environment does not load MyBatis classes.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not include MyBatis classes.\n\nRed Hat Fuse 6 and 7 are not directly affected by this issue, as although they do ship the vulnerable jackson-databind component, they do not enable polymorphic deserialization or default typing which are required for exploitability. Their impacts have correspondingly been reduced to Moderate. Future updates may address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-11307"
},
{
"category": "external",
"summary": "RHBZ#1677341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1677341"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-11307",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11307"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-11307",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11307"
}
],
"release_date": "2018-05-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis"
},
{
"cve": "CVE-2018-12022",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1671097"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Jodd DB connection classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization of types from Jodd-db library",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since Candlepin\u0027s java runtime environment does not load Jodd classes.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not load Jodd classes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12022"
},
{
"category": "external",
"summary": "RHBZ#1671097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12022",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12022"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12022",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12022"
}
],
"release_date": "2018-05-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization of types from Jodd-db library"
},
{
"cve": "CVE-2018-12023",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1671096"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since Candlepin\u0027s java runtime environment does not load Oracle\u0027s JDBC classes.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not load Oracle\u0027s JDBC classes.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12023"
},
{
"category": "external",
"summary": "RHBZ#1671096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12023",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12023"
}
],
"release_date": "2018-06-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver"
},
{
"cve": "CVE-2018-14718",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666415"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using slf4j classes. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: arbitrary code execution in slf4j-ext class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in jackson-databind involves exploiting CVE-2018-1088 against slf4j, which was fixed in Red Hat products through the errata referenced at https://access.redhat.com/security/cve/cve-2018-8088. Applications that link only slf4j versions including that fix are not vulnerable to this vulnerability.\n\nRed Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t bundle slf4j-ext jar.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-14718"
},
{
"category": "external",
"summary": "RHBZ#1666415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-14718",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-14718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14718"
}
],
"release_date": "2018-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: arbitrary code execution in slf4j-ext class"
},
{
"cve": "CVE-2018-14719",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666418"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using blaze classes. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The following Red Hat products are not affected by this issue as they do not bundle or provide the requisite gadget jars to exploit this vulnerability:\nRed Hat Satellite 6\nRed Hat Enterprise Virtualization 4\nRed Hat Fuse 6, 7, and Fuse Integration Services 2\nRed Hat A-MQ 6",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-14719"
},
{
"category": "external",
"summary": "RHBZ#1666418",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666418"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-14719",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14719"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-14719",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14719"
}
],
"release_date": "2018-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes"
},
{
"cve": "CVE-2018-19360",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666482"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the axis2-transport-jms class. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization in axis2-transport-jms class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t include axis2-transport-jms jar.\n\nRed Hat Virtualization 4 is not affected by this issue, since it does not include axis2-transport-jms jar.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19360"
},
{
"category": "external",
"summary": "RHBZ#1666482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19360",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19360"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19360",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19360"
}
],
"release_date": "2018-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization in axis2-transport-jms class"
},
{
"cve": "CVE-2018-19361",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the OpenJPA class. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization in openjpa class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t bundle openjpa jar.\n\nRed Hat Virtualization 4 is not affected by this issue, since its candlepin component doesn\u0027t bundle openjpa jar.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19361"
},
{
"category": "external",
"summary": "RHBZ#1666484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19361",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19361"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19361",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19361"
}
],
"release_date": "2018-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization in openjpa class"
},
{
"cve": "CVE-2018-19362",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2019-01-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1666489"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the jboss-common-core class. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: improper polymorphic deserialization in jboss-common-core class",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Satellite 6 is not affected by this issue, since its candlepin component doesn\u0027t bundle jboss-common-core jar.\n\nRed Hat Virtualization 4 is not affected by this issue, since its candlepin component doesn\u0027t bundle jboss-common-core jar.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19362"
},
{
"category": "external",
"summary": "RHBZ#1666489",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1666489"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19362",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19362"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19362",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19362"
}
],
"release_date": "2018-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: improper polymorphic deserialization in jboss-common-core class"
},
{
"cve": "CVE-2018-1000180",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2018-06-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1588306"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in BouncyCastle. The number of iterations of the Miller-Rabin primality test was incorrectly calculated (according to FIPS 186-4 C.3). Under some circumstances, this could lead to the generation of weak RSA key pairs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: flaw in the low-level interface to RSA key pair generator",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of bouncycastle as shipped with Red Hat Subscription Asset Manager 1.x. Red Hat Product Security has rated this issue as having a security impact of Moderate. No update is planned for this product at this time. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.\n\nRed Hat Satellite 6.5 isn\u0027t vulnerable to this issue, since it doesn\u0027t ship bouncycastle jar file anymore.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Text-Only RHOAR"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1000180"
},
{
"category": "external",
"summary": "RHBZ#1588306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000180",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000180"
}
],
"release_date": "2018-04-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-24T18:46:31+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Text-Only RHOAR"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"Text-Only RHOAR"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bouncycastle: flaw in the low-level interface to RSA key pair generator"
}
]
}
RHSA-2018_1249
Vulnerability from csaf_redhat - Published: 2018-04-25 18:33 - Updated: 2024-11-25 12:10Summary
Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.2
Notes
Topic
An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).
With this update, the eap7-jboss-ec2-eap package has been updated to ensure
compatibility with Red Hat JBoss Enterprise Application Platform 7.1.2.
Refer to the JBoss Enterprise Application Platform 7.1 Release Notes, linked to in the References section, for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix
of CVE-2016-4993) (CVE-2018-1067)
* wildfly-undertow: undertow: Path traversal in ServletResourceManager class
(CVE-2018-1047)
* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
Red Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).\n\nWith this update, the eap7-jboss-ec2-eap package has been updated to ensure\ncompatibility with Red Hat JBoss Enterprise Application Platform 7.1.2.\n\nRefer to the JBoss Enterprise Application Platform 7.1 Release Notes, linked to in the References section, for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix\nof CVE-2016-4993) (CVE-2018-1067)\n\n* wildfly-undertow: undertow: Path traversal in ServletResourceManager class\n(CVE-2018-1047)\n\n* slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)\n\nRed Hat would like to thank Ammarit Thongthua and Nattakit Intarasorn (Deloitte Thailand Pentest team) for reporting CVE-2018-1067, and Chris McCown for reporting CVE-2018-8088.\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1249",
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/"
},
{
"category": "external",
"summary": "1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "JBEAP-14137",
"url": "https://issues.redhat.com/browse/JBEAP-14137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1249.json"
}
],
"title": "Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.2",
"tracking": {
"current_release_date": "2024-11-25T12:10:14+00:00",
"generator": {
"date": "2024-11-25T12:10:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1249",
"initial_release_date": "2018-04-25T18:33:41+00:00",
"revision_history": [
{
"date": "2018-04-25T18:33:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-25T18:33:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-25T12:10:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_id": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap-samples@7.1.2-1.GA_redhat_1.ep7.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_id": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap@7.1.2-1.GA_redhat_1.ep7.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_id": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-jboss-ec2-eap-samples@7.1.2-1.GA_redhat_1.ep7.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server",
"product_id": "6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"relates_to_product_reference": "6Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src"
},
"product_reference": "eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"relates_to_product_reference": "7Server-JBEAP-7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
},
"product_reference": "eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1047",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2017-12-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1528361"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was discovered in Undertow\u0027s org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method. This could lead to information disclosure of arbitrary local files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: Path traversal in ServletResourceManager class",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1047"
},
{
"category": "external",
"summary": "RHBZ#1528361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1047",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1047"
}
],
"release_date": "2017-12-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:33:41+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: Path traversal in ServletResourceManager class"
},
{
"acknowledgments": [
{
"names": [
"Ammarit Thongthua",
"Nattakit Intarasorn"
],
"organization": "Deloitte Thailand Pentest team"
}
],
"cve": "CVE-2018-1067",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1550671"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1067"
},
{
"category": "external",
"summary": "RHBZ#1550671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1067",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1067"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
}
],
"release_date": "2018-04-25T17:51:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:33:41+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)"
},
{
"acknowledgments": [
{
"names": [
"Chris McCown"
]
}
],
"cve": "CVE-2018-8088",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2018-02-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1548909"
}
],
"notes": [
{
"category": "description",
"text": "An XML deserialization vulnerability was discovered in slf4j\u0027s EventData, which accepts an XML serialized string and can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates.\n\nThis issue did not affect the versions of Candlepin as shipped with Red Hat Satellite 6 as Candlepin uses slf4j-api and not the affected slf4j-ext (which is not on the Candlepin classpath).\n\nRed Hat Enterprise Virtualization Manager 4.1 is affected by this issue. Updated packages that address this issue are available through the Red Hat Enterprise Linux Server channels. Virtualization Manager hosts should be subscribed to these channels and obtain the updates via `yum update`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-8088"
},
{
"category": "external",
"summary": "RHBZ#1548909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
}
],
"release_date": "2018-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-25T18:33:41+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6.src",
"6Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el6.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7.src",
"7Server-JBEAP-7.1:eap7-jboss-ec2-eap-samples-0:7.1.2-1.GA_redhat_1.ep7.el7.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution"
}
]
}
CNVD-2018-15266
Vulnerability from cnvd - Published: 2018-08-14
VLAI Severity ?
Title
Undertow HTTP header注入和响应拆分漏洞
Description
Red Hat Undertow是美国红帽（Red Hat）公司的一款基于Java的嵌入式Web服务器，是Wildfly（Java应用服务器）默认的Web服务器。
Red Hat Undertow 7.1.2.CR1之前版本和7.1.2.GA之前版本中存在安全漏洞，该漏洞源于程序将用户输入用作HTTP包头值之前，未能充分的过滤和验证该输入。攻击者可利用该漏洞注入任意的PHP包头，造成响应拆分。
Severity
中
Patch Name
Undertow HTTP header注入和响应拆分漏洞的补丁
Patch Description
Red Hat Undertow是美国红帽（Red Hat）公司的一款基于Java的嵌入式Web服务器，是Wildfly（Java应用服务器）默认的Web服务器。
Red Hat Undertow 7.1.2.CR1之前版本和7.1.2.GA之前版本中存在安全漏洞，该漏洞源于程序将用户输入用作HTTP包头值之前，未能充分的过滤和验证该输入。攻击者可利用该漏洞注入任意的PHP包头，造成响应拆分。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
厂商已发布漏洞修复程序，请及时关注更新： https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067
Reference
https://nvd.nist.gov/vuln/detail/CVE-2018-1067
Impacted products
| Name | ['Red Hat Undertow <7.1.2.CR1', 'Red Hat Undertow <7.1.2.GA'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2018-1067"
}
},
"description": "Red Hat Undertow\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u57fa\u4e8eJava\u7684\u5d4c\u5165\u5f0fWeb\u670d\u52a1\u5668\uff0c\u662fWildfly\uff08Java\u5e94\u7528\u670d\u52a1\u5668\uff09\u9ed8\u8ba4\u7684Web\u670d\u52a1\u5668\u3002\r\n\r\nRed Hat Undertow 7.1.2.CR1\u4e4b\u524d\u7248\u672c\u548c7.1.2.GA\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5c06\u7528\u6237\u8f93\u5165\u7528\u4f5cHTTP\u5305\u5934\u503c\u4e4b\u524d\uff0c\u672a\u80fd\u5145\u5206\u7684\u8fc7\u6ee4\u548c\u9a8c\u8bc1\u8be5\u8f93\u5165\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610f\u7684PHP\u5305\u5934\uff0c\u9020\u6210\u54cd\u5e94\u62c6\u5206\u3002",
"discovererName": "Laura Pardo",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2018-15266",
"openTime": "2018-08-14",
"patchDescription": "Red Hat Undertow\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u57fa\u4e8eJava\u7684\u5d4c\u5165\u5f0fWeb\u670d\u52a1\u5668\uff0c\u662fWildfly\uff08Java\u5e94\u7528\u670d\u52a1\u5668\uff09\u9ed8\u8ba4\u7684Web\u670d\u52a1\u5668\u3002\r\n\r\nRed Hat Undertow 7.1.2.CR1\u4e4b\u524d\u7248\u672c\u548c7.1.2.GA\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5c06\u7528\u6237\u8f93\u5165\u7528\u4f5cHTTP\u5305\u5934\u503c\u4e4b\u524d\uff0c\u672a\u80fd\u5145\u5206\u7684\u8fc7\u6ee4\u548c\u9a8c\u8bc1\u8be5\u8f93\u5165\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610f\u7684PHP\u5305\u5934\uff0c\u9020\u6210\u54cd\u5e94\u62c6\u5206\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Undertow HTTP header\u6ce8\u5165\u548c\u54cd\u5e94\u62c6\u5206\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Red Hat Undertow \u003c7.1.2.CR1",
"Red Hat Undertow \u003c7.1.2.GA"
]
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"serverity": "\u4e2d",
"submitTime": "2018-05-22",
"title": "Undertow HTTP header\u6ce8\u5165\u548c\u54cd\u5e94\u62c6\u5206\u6f0f\u6d1e"
}
GHSA-47MP-RQ2X-WJF2
Vulnerability from github – Published: 2022-05-13 01:14 – Updated: 2022-06-30 13:49
VLAI?
Summary
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow
Details
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.
Severity ?
6.1 (Medium)
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 7.1.1.GA"
},
"package": {
"ecosystem": "Maven",
"name": "org.jboss.eap:wildfly-undertow"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.1.2.GA"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2018-1067"
],
"database_specific": {
"cwe_ids": [
"CWE-113"
],
"github_reviewed": true,
"github_reviewed_at": "2022-06-30T13:49:55Z",
"nvd_published_at": "2018-05-21T17:29:00Z",
"severity": "MODERATE"
},
"details": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"id": "GHSA-47mp-rq2x-wjf2",
"modified": "2022-06-30T13:49:55Z",
"published": "2022-05-13T01:14:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"type": "CVSS_V3"
}
],
"summary": "Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow"
}
FKIE_CVE-2018-1067
Vulnerability from fkie_nvd - Published: 2018-05-21 17:29 - Updated: 2024-11-21 03:59
Severity ?
Summary
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| redhat | undertow | * | |
| redhat | undertow | * | |
| redhat | jboss_enterprise_application_platform | 7.1 | |
| redhat | enterprise_linux | 6.0 | |
| redhat | enterprise_linux | 7.0 | |
| redhat | virtualization_host | 4.0 | |
| redhat | enterprise_linux | 7.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8B6F497B-67CA-4155-8DEC-802FE17B011C",
"versionEndExcluding": "1.4.25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B6639249-46A5-41DC-B268-178188CB5816",
"versionEndExcluding": "2.0.5",
"versionStartIncluding": "2.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7117F117-D439-45EB-BB95-397E5E52C9BB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BB28F9AF-3D06-4532-B397-96D7E4792503",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value."
},
{
"lang": "es",
"value": "En Undertow, en versiones anteriores a la 7.1.2.CR1, 7.1.2.GA, se descubri\u00f3 que la soluci\u00f3n para CVE-2016-4993 no estaba completa. Por lo tanto, el servidor web de Undertow es vulnerable a la inyecci\u00f3n de cabeceras HTTP arbitrarias y tambi\u00e9n a la separaci\u00f3n de respuestas, debido al saneamiento y validaci\u00f3n insuficientes de entradas de usuario antes de que se empleen como parte de un valor de cabecera HTTP."
}
],
"id": "CVE-2018-1067",
"lastModified": "2024-11-21T03:59:06.580",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5,
"source": "secalert@redhat.com",
"type": "Secondary"
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2018-05-21T17:29:00.917",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
},
{
"source": "secalert@redhat.com",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-113"
}
],
"source": "secalert@redhat.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-113"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GSD-2018-1067
Vulnerability from gsd - Updated: 2023-12-13 01:22Details
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2018-1067",
"description": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"id": "GSD-2018-1067",
"references": [
"https://access.redhat.com/errata/RHSA-2020:2562",
"https://access.redhat.com/errata/RHSA-2019:0877",
"https://access.redhat.com/errata/RHSA-2018:2643",
"https://access.redhat.com/errata/RHSA-2018:1251",
"https://access.redhat.com/errata/RHSA-2018:1249",
"https://access.redhat.com/errata/RHSA-2018:1248",
"https://access.redhat.com/errata/RHSA-2018:1247"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2018-1067"
],
"details": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"id": "GSD-2018-1067",
"modified": "2023-12-13T01:22:36.862917Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2018-1067",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "undertow",
"version": {
"version_data": [
{
"version_value": "undertow 7.1.2.CR1"
},
{
"version_value": "undertow 7.1.2.GA"
}
]
}
}
]
},
"vendor_name": "[UNKNOWN]"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value."
}
]
},
"impact": {
"cvss": [
[
{
"vectorString": "5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
}
],
[
{
"vectorString": "5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
}
]
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-113"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:1248",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"name": "RHSA-2018:1251",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"name": "RHSA-2018:2643",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
},
{
"name": "RHSA-2018:1247",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"name": "RHSA-2018:1249",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"name": "RHSA-2019:0877",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "(,1.4.25),[2.0.0,2.0.5)",
"affected_versions": "All versions before 1.4.25, all versions starting from 2.0.0 before 2.0.5",
"cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"cvss_v3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"cwe_ids": [
"CWE-1035",
"CWE-113",
"CWE-937"
],
"date": "2019-10-09",
"description": "Undertow is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"fixed_versions": [
"1.4.25.Final",
"2.0.5.Final"
],
"identifier": "CVE-2018-1067",
"identifiers": [
"CVE-2018-1067"
],
"not_impacted": "All versions starting from 1.4.25 before 2.0.0, all versions starting from 2.0.5",
"package_slug": "maven/io.undertow/undertow-core",
"pubdate": "2018-05-21",
"solution": "Upgrade to version 1.4.25.Final, 2.0.5.Final or above.",
"title": "HTTP Response Splitting",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2018-1067"
],
"uuid": "25d71260-296d-41ae-a48d-46289ca8f534"
},
{
"affected_range": "(,7.1.1.GA]",
"affected_versions": "All versions up to 7.1.1.ga",
"cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"cwe_ids": [
"CWE-1035",
"CWE-113",
"CWE-937"
],
"date": "2022-06-30",
"description": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.",
"fixed_versions": [
"7.1.2.GA"
],
"identifier": "CVE-2018-1067",
"identifiers": [
"GHSA-47mp-rq2x-wjf2",
"CVE-2018-1067"
],
"not_impacted": "All versions after 7.1.1.ga",
"package_slug": "maven/org.jboss.eap/wildfly-undertow",
"pubdate": "2022-05-13",
"solution": "Upgrade to version 7.1.2.GA or above.",
"title": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Response Splitting\u0027)",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2018-1067",
"https://access.redhat.com/errata/RHSA-2018:1247",
"https://access.redhat.com/errata/RHSA-2018:1248",
"https://access.redhat.com/errata/RHSA-2018:1249",
"https://access.redhat.com/errata/RHSA-2018:1251",
"https://access.redhat.com/errata/RHSA-2018:2643",
"https://access.redhat.com/errata/RHSA-2019:0877",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067",
"https://github.com/advisories/GHSA-47mp-rq2x-wjf2"
],
"uuid": "e9aa7a47-160a-4d19-b97f-c8576e5225af"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.4.25",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.0.5",
"versionStartIncluding": "2.0.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2018-1067"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-113"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067"
},
{
"name": "RHSA-2018:1251",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1251"
},
{
"name": "RHSA-2018:1249",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1249"
},
{
"name": "RHSA-2018:1248",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1248"
},
{
"name": "RHSA-2018:1247",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1247"
},
{
"name": "RHSA-2018:2643",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2643"
},
{
"name": "RHSA-2019:0877",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:0877"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
},
"lastModifiedDate": "2020-10-15T13:28Z",
"publishedDate": "2018-05-21T17:29Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…