Improper input validation in Redhat Jboss_enterprise_application_platform
CVE-2010-3862
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or J…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.017 (82.5th percentile) — read the EPSS interpretation.
Affected products
- Redhat Jboss_enterprise_application_platform — versions 4.3.0, 5.1.0
- Redhat Jboss_enterprise_web_platform — versions 5.1.0
- Redhat Jboss_remoting — versions 2.2.2, 2.2.0, 2.2.3
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_MISC)
- RHSA-2010:0938 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- RHSA-2010:0960 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- RHSA-2010:0959 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM)
- RHSA-2010:0937 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- RHSA-2010:0961 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- RHSA-2010:0962 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- RHSA-2010:0939 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)