Action not permitted
Modal body text goes here.
CVE-2014-8122
Vulnerability from cvelistv5
Published
2015-02-13 15:00
Modified
2024-08-06 13:10
Severity ?
EPSS score ?
Summary
Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T13:10:50.982Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65" }, { "name": "redhat-jboss-cve20148122-info-disc(100892)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100892" }, { "name": "RHSA-2015:0675", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html" }, { "name": "RHSA-2015:0773", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html" }, { "name": "RHSA-2015:0920", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0920.html" }, { "name": "RHSA-2015:0850", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086" }, { "name": "74252", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/74252" }, { "name": "RHSA-2015:0215", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0215.html" }, { "name": "RHSA-2015:0851", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml" }, { "name": "RHSA-2015:0217", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0217.html" }, { "name": "RHSA-2015:0218", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0218.html" }, { "name": "RHSA-2015:0216", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0216.html" }, { "name": "1031741", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1031741" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2015-02-11T00:00:00", "descriptions": [ { "lang": "en", "value": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2017-09-07T15:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65" }, { "name": "redhat-jboss-cve20148122-info-disc(100892)", "tags": [ "vdb-entry", "x_refsource_XF" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100892" }, { "name": "RHSA-2015:0675", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html" }, { "name": "RHSA-2015:0773", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html" }, { "name": "RHSA-2015:0920", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0920.html" }, { "name": "RHSA-2015:0850", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086" }, { "name": "74252", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/74252" }, { "name": "RHSA-2015:0215", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0215.html" }, { "name": "RHSA-2015:0851", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml" }, { "name": "RHSA-2015:0217", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0217.html" }, { "name": "RHSA-2015:0218", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0218.html" }, { "name": "RHSA-2015:0216", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0216.html" }, { "name": "1031741", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1031741" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2014-8122", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745", "refsource": "CONFIRM", "url": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745" }, { "name": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65", "refsource": "CONFIRM", "url": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65" }, { "name": "redhat-jboss-cve20148122-info-disc(100892)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100892" }, { "name": "RHSA-2015:0675", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html" }, { "name": "RHSA-2015:0773", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html" }, { "name": "RHSA-2015:0920", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0920.html" }, { "name": "RHSA-2015:0850", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html" }, { "name": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086", "refsource": "CONFIRM", "url": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086" }, { "name": "74252", "refsource": "BID", "url": "http://www.securityfocus.com/bid/74252" }, { "name": "RHSA-2015:0215", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0215.html" }, { "name": "RHSA-2015:0851", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html" }, { "name": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml", "refsource": "MISC", "url": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml" }, { "name": "RHSA-2015:0217", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0217.html" }, { "name": "RHSA-2015:0218", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0218.html" }, { "name": "RHSA-2015:0216", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0216.html" }, { "name": "1031741", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1031741" } ] } } } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2014-8122", "datePublished": "2015-02-13T15:00:00", "dateReserved": "2014-10-10T00:00:00", "dateUpdated": "2024-08-06T13:10:50.982Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2014-8122\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2015-02-13T15:59:07.400\",\"lastModified\":\"2024-11-21T02:18:36.170\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.\"},{\"lang\":\"es\",\"value\":\"Condici\u00f3n de carrera en JBoss Weld anterior a 2.2.8 y 3.x anterior a 3.0.0 Alpha3 permite a atacantes remotos obtener informaci\u00f3n de una conversaci\u00f3n previa a trav\u00e9s de vectores relacionados con un estado de hilo obsoleto.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_weld:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.2.7\",\"matchCriteriaId\":\"2D306C4F-F535-4707-93F8-EA8B8A36F395\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_weld:3.0.0:alpha1:*:*:*:*:*:*\",\"matchCriteriaId\":\"19A64BC0-952A-42C7-B97D-4137DAFD9224\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_weld:3.0.0:alpha2:*:*:*:*:*:*\",\"matchCriteriaId\":\"385451CD-5BBB-42B6-AE41-AECEB52C8762\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0215.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0216.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0217.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0218.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0675.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0773.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0850.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0851.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0920.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/74252\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id/1031741\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/100892\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0215.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0216.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0217.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0218.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0675.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0773.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0850.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0851.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0920.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/74252\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1031741\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/100892\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
ghsa-338v-3958-8v8r
Vulnerability from github
Published
2020-06-10 20:54
Modified
2021-08-30 13:39
Summary
Information disclosure in JBoss Weld
Details
Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.
{ "affected": [ { "package": { "ecosystem": "Maven", "name": "org.jboss.weld:weld-core-bom" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "2.2.8" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2014-8122" ], "database_specific": { "cwe_ids": [ "CWE-362" ], "github_reviewed": true, "github_reviewed_at": "2020-06-10T20:53:46Z", "nvd_published_at": null, "severity": "MODERATE" }, "details": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.", "id": "GHSA-338v-3958-8v8r", "modified": "2021-08-30T13:39:36Z", "published": "2020-06-10T20:54:15Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" }, { "type": "WEB", "url": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745" }, { "type": "WEB", "url": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086" }, { "type": "WEB", "url": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100892" }, { "type": "WEB", "url": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml" }, { "type": "WEB", "url": "https://github.com/weld/core" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0215.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0216.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0217.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0218.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0920.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/74252" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1031741" } ], "schema_version": "1.4.0", "severity": [], "summary": "Information disclosure in JBoss Weld" }
rhsa-2015_0216
Vulnerability from csaf_redhat
Published
2015-02-11 20:18
Modified
2024-11-22 09:00
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform
6.3.3 and fix multiple security issues, several bugs, and add various
enhancements are now available for Red Hat Enterprise Linux 5.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was found that the RESTEasy DocumentProvider did not set the
external-parameter-entities and external-general-entities features
appropriately, thus allowing external entity expansion. A remote attacker
able to send XML requests to a RESTEasy endpoint could use this flaw to
read files accessible to the user running the application server, and
potentially perform other more advanced XML eXternal Entity (XXE) attacks.
(CVE-2014-7839)
It was discovered that the Role Based Access Control (RBAC) implementation
did not sufficiently verify all authorization conditions that are required
by the Maintainer role to perform certain administrative actions.
An authenticated user with the Maintainer role could use this flaw to add,
modify, or undefine a limited set of attributes and their values, which
otherwise cannot be written to. (CVE-2014-7849)
It was discovered that the JBoss Application Server (WildFly) JacORB
subsystem incorrectly assigned socket-binding-ref sensitivity
classification for the security-domain attribute. An authenticated user
with a role that has access to attributes with socket-binding-ref and not
security-domain-ref sensitivity classification could use this flaw to
access sensitive information present in the security-domain attribute.
(CVE-2014-7853)
It was found that when processing undefined security domains, the
org.jboss.security.plugins.mapping.JBossMappingManager implementation would
fall back to the default security domain if it was available. A user with
valid credentials in the defined default domain, with a role that is valid
in the expected application domain, could perform actions that were
otherwise not available to them. When using the SAML2 STS Login Module,
JBossMappingManager exposed this issue due to the PicketLink Trust
SecurityActions implementation using a hardcoded default value when
defining the context. (CVE-2014-7827)
It was discovered that under specific conditions the conversation state
information stored in a thread-local variable was not sanitized correctly
when the conversation ended. This could lead to a race condition that could
potentially expose sensitive information from a previous conversation to
the current conversation. (CVE-2014-8122)
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were
discovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application
Platform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of
the Red Hat Quality Engineering Team.
This release serves as a replacement for Red Hat JBoss Enterprise
Application Platform 6.3.2, and includes bug fixes and enhancements.
Documentation for these changes is available from the link in the
References section.
All users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat
Enterprise Linux 6 are advised to upgrade to these updated packages.
The JBoss server process must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform\n6.3.3 and fix multiple security issues, several bugs, and add various\nenhancements are now available for Red Hat Enterprise Linux 5.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was found that the RESTEasy DocumentProvider did not set the\nexternal-parameter-entities and external-general-entities features\nappropriately, thus allowing external entity expansion. A remote attacker\nable to send XML requests to a RESTEasy endpoint could use this flaw to\nread files accessible to the user running the application server, and\npotentially perform other more advanced XML eXternal Entity (XXE) attacks.\n(CVE-2014-7839)\n\nIt was discovered that the Role Based Access Control (RBAC) implementation\ndid not sufficiently verify all authorization conditions that are required\nby the Maintainer role to perform certain administrative actions.\nAn authenticated user with the Maintainer role could use this flaw to add,\nmodify, or undefine a limited set of attributes and their values, which\notherwise cannot be written to. (CVE-2014-7849)\n\nIt was discovered that the JBoss Application Server (WildFly) JacORB\nsubsystem incorrectly assigned socket-binding-ref sensitivity\nclassification for the security-domain attribute. An authenticated user\nwith a role that has access to attributes with socket-binding-ref and not\nsecurity-domain-ref sensitivity classification could use this flaw to\naccess sensitive information present in the security-domain attribute.\n(CVE-2014-7853)\n\nIt was found that when processing undefined security domains, the\norg.jboss.security.plugins.mapping.JBossMappingManager implementation would\nfall back to the default security domain if it was available. A user with\nvalid credentials in the defined default domain, with a role that is valid\nin the expected application domain, could perform actions that were\notherwise not available to them. When using the SAML2 STS Login Module,\nJBossMappingManager exposed this issue due to the PicketLink Trust\nSecurityActions implementation using a hardcoded default value when\ndefining the context. (CVE-2014-7827)\n\nIt was discovered that under specific conditions the conversation state\ninformation stored in a thread-local variable was not sanitized correctly\nwhen the conversation ended. This could lead to a race condition that could\npotentially expose sensitive information from a previous conversation to\nthe current conversation. (CVE-2014-8122)\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were\ndiscovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application\nPlatform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of\nthe Red Hat Quality Engineering Team.\n\nThis release serves as a replacement for Red Hat JBoss Enterprise\nApplication Platform 6.3.2, and includes bug fixes and enhancements.\nDocumentation for these changes is available from the link in the\nReferences section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat\nEnterprise Linux 6 are advised to upgrade to these updated packages.\nThe JBoss server process must be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0216", "url": "https://access.redhat.com/errata/RHSA-2015:0216" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893\u0026product=appplatform\u0026version=6.3\u0026downloadType=patches#eap63_details", "url": "https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893\u0026product=appplatform\u0026version=6.3\u0026downloadType=patches#eap63_details" }, { "category": "external", "summary": "1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "1179415", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179415" }, { "category": "external", "summary": "1179418", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179418" }, { "category": "external", "summary": "1179426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179426" }, { "category": "external", "summary": "1179429", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179429" }, { "category": "external", "summary": "1179433", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179433" }, { "category": "external", "summary": "1179436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179436" }, { "category": "external", "summary": "1179439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179439" }, { "category": "external", "summary": "1179443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179443" }, { "category": "external", "summary": "1181731", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181731" }, { "category": "external", "summary": "1181734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181734" }, { "category": "external", "summary": "1181737", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181737" }, { "category": "external", "summary": "1181741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181741" }, { "category": "external", "summary": "1181746", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181746" }, { "category": "external", "summary": "1181749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181749" }, { "category": "external", "summary": "1181757", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181757" }, { "category": "external", "summary": "1181760", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181760" }, { "category": "external", "summary": "1181837", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181837" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0216.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update", "tracking": { "current_release_date": "2024-11-22T09:00:19+00:00", "generator": { "date": "2024-11-22T09:00:19+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0216", "initial_release_date": "2015-02-11T20:18:36+00:00", "revision_history": [ { "date": "2015-02-11T20:18:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-02-11T20:18:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T09:00:19+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product": { "name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform" }, { "branches": [ { "category": "product_version", "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.4-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "product": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "product_id": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-18.redhat_4.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-spi@2.3.1-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-console@2.2.12-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-hal@2.2.12-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-modules@1.3.5-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_id": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/wss4j@1.6.17-2.SP1_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/weld-core@1.1.28-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossts@4.17.26-1.Final_redhat_1.1.ep6.el5?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "product": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "product_id": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy@2.3.8-13.SP4_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.4-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "product": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "product_id": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/apache-cxf@2.7.14-1.redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpserver@1.0.2-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hornetq@2.3.21.2-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossweb@7.4.10-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-ejb-client@1.0.28-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "product": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "product_id": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketbox@4.0.19-10.SP10_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-marshalling@1.4.10-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "product": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "product_id": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/glassfish-jsf-eap6@2.1.28-6.redhat_7.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "product": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "product_id": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/guava-libraries@13.0.1-4.redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "product": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "product_id": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-security-negotiation@2.3.6-1.Final_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "product": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "product_id": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-saaj-1.3-impl@1.3.16-11.SP1_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product": { "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_id": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-core-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_id": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product": { "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_id": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-envers-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product": { "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_id": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-entitymanager-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product": { "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_id": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-infinispan-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "product": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "product_id": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-istack-commons@2.6.1-12.redhat_3.1.ep6.el5?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "product": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "product_id": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-bindings@2.5.3-15.SP16_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jdr@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-network@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-protocol@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-messaging@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-appclient@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "product": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "product_id": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-federation@2.5.3-16.SP16_redhat_1.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-javadocs@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-logging@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jpa@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-appclient@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-mail@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-threads@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-embedded@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-version@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-webservices@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jmx@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-domain@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-product-eap@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-security@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-transactions@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-naming@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-standalone@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-sar@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-client-all@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-weld@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-server@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-pojo@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-web@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-xts@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-core-security@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-remoting@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-connector@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-core@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-bundles@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-clustering@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsf@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cli@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cmp@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_id": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.4-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "product": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "product_id": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-18.redhat_4.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-spi@2.3.1-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-console@2.2.12-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-hal@2.2.12-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-modules@1.3.5-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src", "product": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src", "product_id": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wss4j@1.6.17-2.SP1_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "product_id": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/weld-core@1.1.28-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossts@4.17.26-1.Final_redhat_1.1.ep6.el5?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "product": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "product_id": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy@2.3.8-13.SP4_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.4-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "product": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "product_id": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/apache-cxf@2.7.14-1.redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "product_id": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpserver@1.0.2-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "product_id": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hornetq@2.3.21.2-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossweb@7.4.10-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-ejb-client@1.0.28-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "product": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "product_id": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketbox@4.0.19-10.SP10_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-marshalling@1.4.10-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "product": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "product_id": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/glassfish-jsf-eap6@2.1.28-6.redhat_7.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "product": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "product_id": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/guava-libraries@13.0.1-4.redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "product": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "product_id": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-security-negotiation@2.3.6-1.Final_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "product": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "product_id": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-saaj-1.3-impl@1.3.16-11.SP1_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "product": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "product_id": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "product": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "product_id": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-istack-commons@2.6.1-12.redhat_3.1.ep6.el5?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "product": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "product_id": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-bindings@2.5.3-15.SP16_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jdr@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-network@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-protocol@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-messaging@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-appclient@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "product": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "product_id": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-federation@2.5.3-16.SP16_redhat_1.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-javadocs@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-logging@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jpa@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-appclient@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-mail@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-threads@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-embedded@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-version@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-webservices@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jmx@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-domain@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-product-eap@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-security@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-transactions@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-naming@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-standalone@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-sar@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-client-all@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-weld@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-server@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-pojo@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-web@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-xts@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-core-security@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-remoting@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-connector@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-core@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-bundles@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-clustering@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsf@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cli@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cmp@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_id": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.4.3-3.Final_redhat_2.1.ep6.el5?arch=src" } } }, { "category": "product_version", "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_id": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.4.3-2.Final_redhat_2.1.ep6.el5?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch" }, "product_reference": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src" }, "product_reference": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch" }, "product_reference": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src" }, "product_reference": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch" }, "product_reference": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src" }, "product_reference": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch" }, "product_reference": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src" }, "product_reference": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch" }, "product_reference": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch" }, "product_reference": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src" }, "product_reference": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch" }, "product_reference": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch" }, "product_reference": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch" }, "product_reference": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch" }, "product_reference": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src" }, "product_reference": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch" }, "product_reference": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src" }, "product_reference": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch" }, "product_reference": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src" }, "product_reference": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch" }, "product_reference": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src" }, "product_reference": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch" }, "product_reference": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src" }, "product_reference": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch" }, "product_reference": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src" }, "product_reference": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch" }, "product_reference": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src" }, "product_reference": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch" }, "product_reference": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src" }, "product_reference": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch" }, "product_reference": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "relates_to_product_reference": "5Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server", "product_id": "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" }, "product_reference": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src", "relates_to_product_reference": "5Server-JBEAP-6.3" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Ondra Lukas" ], "organization": "Red Hat Quality Engineering Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7827", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1160574" } ], "notes": [ { "category": "description", "text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.", "title": "Vulnerability description" }, { "category": "summary", "text": "Security: Wrong security context loaded when using SAML2 STS Login Module", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7827" }, { "category": "external", "summary": "RHBZ#1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7827" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:18:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0216" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Security: Wrong security context loaded when using SAML2 STS Login Module" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:18:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0216" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7849", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165170" } ], "notes": [ { "category": "description", "text": "It was discovered that the Role Based Access Control (RBAC) implementation did not sufficiently verify all authorization conditions that are required by the Maintainer role to perform certain administrative actions. An authenticated user with the Maintainer role could use this flaw to add, modify, or undefine a limited set of attributes and their values, which otherwise cannot be written to.", "title": "Vulnerability description" }, { "category": "summary", "text": "Management: Limited RBAC authorization bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of Red Hat JBoss Enterprise Application Platform before 6.2.0 as they did not include support for role-based access control (RBAC).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7849" }, { "category": "external", "summary": "RHBZ#1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7849", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7849" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:18:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0216" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Management: Limited RBAC authorization bypass" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7853", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165522" } ], "notes": [ { "category": "description", "text": "It was discovered that the JBoss Application Server (WildFly) JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref sensitivity classification could use this flaw to access sensitive information present in the security-domain attribute.", "title": "Vulnerability description" }, { "category": "summary", "text": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7853" }, { "category": "external", "summary": "RHBZ#1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7853", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7853" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:18:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0216" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:18:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0216" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.noarch", "5Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el5.src", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.noarch", "5Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el5.src", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el5.src", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.noarch", "5Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el5.src", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el5.src", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.noarch", "5Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el5.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" } ] }
rhsa-2015_0851
Vulnerability from csaf_redhat
Published
2015-04-16 16:02
Modified
2024-11-25 11:57
Summary
Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.0 update
Notes
Topic
Red Hat JBoss BPM Suite 6.1.0, which fixes multiple security issues,
several bugs, and adds various enhancements, is now available from the Red
Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss BPM Suite is a business rules and processes management system
for the management, storage, creation, modification, and deployment of
JBoss rules and BPMN2-compliant business processes.
This release of Red Hat JBoss BPM Suite 6.1.0 serves as a replacement for
Red Hat JBoss BPM Suite 6.0.3, and includes bug fixes and enhancements.
Refer to the Red Hat JBoss BPM Suite 6.1.0 Release Notes for information on
the most significant of these changes. The Release Notes are available at
https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-5783 fix
CVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws
handlers
CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature
DoS Attack
CVE-2013-7397 async-http-client: SSL/TLS certificate verification is
disabled under certain conditions
CVE-2013-7398 async-http-client: missing hostname verification for SSL
certificates
CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid
SAML Tokens as valid
CVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a
Symmetric EncryptBeforeSigning policy
CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file
CVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause
OOM errors
CVE-2014-0110 Apache CXF: Large invalid content could cause temporary space
to fill
CVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-6153 fix
CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics
enforcement of SAML SubjectConfirmation methods
CVE-2014-7827 JBoss Security: Wrong security context loaded when using
SAML2 STS Login Module
CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider
CVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread
state
CVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian
Weimer of Red Hat Product Security; the CVE-2014-8125 was discovered by
Jeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra
Lukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was
discovered by Richard Opalka and Arun Neelicattu of Red Hat.
All users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat
Customer Portal are advised to upgrade to Red Hat JBoss BPM Suite 6.1.0.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss BPM Suite 6.1.0, which fixes multiple security issues,\nseveral bugs, and adds various enhancements, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss BPM Suite is a business rules and processes management system\nfor the management, storage, creation, modification, and deployment of\nJBoss rules and BPMN2-compliant business processes.\n\nThis release of Red Hat JBoss BPM Suite 6.1.0 serves as a replacement for\nRed Hat JBoss BPM Suite 6.0.3, and includes bug fixes and enhancements.\nRefer to the Red Hat JBoss BPM Suite 6.1.0 Release Notes for information on\nthe most significant of these changes. The Release Notes are available at\nhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-5783 fix\n\nCVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws\nhandlers\n\nCVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature\nDoS Attack\n\nCVE-2013-7397 async-http-client: SSL/TLS certificate verification is\ndisabled under certain conditions\n\nCVE-2013-7398 async-http-client: missing hostname verification for SSL\ncertificates\n\nCVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid\nSAML Tokens as valid\n\nCVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a\nSymmetric EncryptBeforeSigning policy\n\nCVE-2014-0059 JBossSX/PicketBox: World readable audit.log file\n\nCVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause\nOOM errors\n\nCVE-2014-0110 Apache CXF: Large invalid content could cause temporary space\nto fill\n\nCVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-6153 fix\n\nCVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics\nenforcement of SAML SubjectConfirmation methods\n\nCVE-2014-7827 JBoss Security: Wrong security context loaded when using\nSAML2 STS Login Module\n\nCVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider\n\nCVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread\nstate\n\nCVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian\nWeimer of Red Hat Product Security; the CVE-2014-8125 was discovered by\nJeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra\nLukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was\ndiscovered by Richard Opalka and Arun Neelicattu of Red Hat.\n\nAll users of Red Hat JBoss BPM Suite 6.0.3 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss BPM Suite 6.1.0.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0851", "url": "https://access.redhat.com/errata/RHSA-2015:0851" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.1.0", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite\u0026downloadType=distributions\u0026version=6.1.0" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/", "url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BPM_Suite/" }, { "category": "external", "summary": "969924", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924" }, { "category": "external", "summary": "1045257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257" }, { "category": "external", "summary": "1063642", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642" }, { "category": "external", "summary": "1093526", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526" }, { "category": "external", "summary": "1093527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527" }, { "category": "external", "summary": "1093529", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529" }, { "category": "external", "summary": "1093530", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530" }, { "category": "external", "summary": "1129074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074" }, { "category": "external", "summary": "1129916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916" }, { "category": "external", "summary": "1133769", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769" }, { "category": "external", "summary": "1133773", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773" }, { "category": "external", "summary": "1157304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304" }, { "category": "external", "summary": "1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "1169553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0851.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.0 update", "tracking": { "current_release_date": "2024-11-25T11:57:35+00:00", "generator": { "date": "2024-11-25T11:57:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0851", "initial_release_date": "2015-04-16T16:02:37+00:00", "revision_history": [ { "date": "2015-04-16T16:02:37+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-02-20T12:35:25+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-25T11:57:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss BPMS 6.0", "product": { "name": "Red Hat JBoss BPMS 6.0", "product_id": "Red Hat JBoss BPMS 6.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_bpms:6.0" } } } ], "category": "product_family", "name": "Red Hat Process Automation Manager" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Florian Weimer" ], "organization": "Red Hat Product Security", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2012-6153", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2012-11-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1129916" } ], "notes": [ { "category": "description", "text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-6153" }, { "category": "external", "summary": "RHBZ#1129916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153", "url": "https://www.cve.org/CVERecord?id=CVE-2012-6153" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153" } ], "release_date": "2014-08-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix" }, { "acknowledgments": [ { "names": [ "Richard Opalka" ] }, { "names": [ "Arun Neelicattu" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2013-2133", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "discovery_date": "2013-06-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "969924" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.", "title": "Vulnerability description" }, { "category": "summary", "text": "WS: EJB3 role restrictions are not applied to jaxws handlers", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-2133" }, { "category": "external", "summary": "RHBZ#969924", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2133", "url": "https://www.cve.org/CVERecord?id=CVE-2013-2133" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133" } ], "release_date": "2013-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "WS: EJB3 role restrictions are not applied to jaxws handlers" }, { "cve": "CVE-2013-4517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2013-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1045257" } ], "notes": [ { "category": "description", "text": "It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions (DTDs) to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "Java: Java XML Signature DoS Attack", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4, Fuse Mediation Router 2.7, 2.8 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nFuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4; Red Hat JBoss Enterprise Data Services Platform 5; Red Hat JBoss Enterprise Portal Platform 4 and 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-4517" }, { "category": "external", "summary": "RHBZ#1045257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4517", "url": "https://www.cve.org/CVERecord?id=CVE-2013-4517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517" } ], "release_date": "2013-11-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Java: Java XML Signature DoS Attack" }, { "cve": "CVE-2013-7397", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "discovery_date": "2014-08-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1133769" } ], "notes": [ { "category": "description", "text": "It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle (MITM) attacker could use this flaw to spoof a valid certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-7397" }, { "category": "external", "summary": "RHBZ#1133769", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7397", "url": "https://www.cve.org/CVERecord?id=CVE-2013-7397" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397" } ], "release_date": "2013-07-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions" }, { "cve": "CVE-2013-7398", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2014-08-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1133773" } ], "notes": [ { "category": "description", "text": "It was found that async-http-client did not verify that the server hostname matched the domain name in the subject\u0027s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name.", "title": "Vulnerability description" }, { "category": "summary", "text": "async-http-client: missing hostname verification for SSL certificates", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-7398" }, { "category": "external", "summary": "RHBZ#1133773", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7398", "url": "https://www.cve.org/CVERecord?id=CVE-2013-7398" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398" } ], "release_date": "2013-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "async-http-client: missing hostname verification for SSL certificates" }, { "cve": "CVE-2014-0034", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093529" } ], "notes": [ { "category": "description", "text": "It was found that the SecurityTokenService (STS), provided as a part of Apache CXF, could under certain circumstances accept invalid SAML tokens as valid. A remote attacker could use a specially crafted SAML token to gain access to an application that uses STS for validation of SAML tokens.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0034" }, { "category": "external", "summary": "RHBZ#1093529", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0034", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0034" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid" }, { "cve": "CVE-2014-0035", "cwe": { "id": "CWE-522", "name": "Insufficiently Protected Credentials" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093530" } ], "notes": [ { "category": "description", "text": "It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0035" }, { "category": "external", "summary": "RHBZ#1093530", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0035", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0035" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy" }, { "cve": "CVE-2014-0059", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "discovery_date": "2014-02-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1063642" } ], "notes": [ { "category": "description", "text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.", "title": "Vulnerability description" }, { "category": "summary", "text": "JBossSX/PicketBox: World readable audit.log file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0059" }, { "category": "external", "summary": "RHBZ#1063642", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0059" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059" } ], "release_date": "2014-05-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JBossSX/PicketBox: World readable audit.log file" }, { "cve": "CVE-2014-0109", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093526" } ], "notes": [ { "category": "description", "text": "A denial of service flaw was found in the way Apache CXF created error messages for certain POST requests. A remote attacker could send a specially crafted request which, when processed by an application using Apache CXF, could consume an excessive amount of memory on the system, possibly triggering an Out Of Memory (OOM) error.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: HTML content posted to SOAP endpoint could cause OOM errors", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0109" }, { "category": "external", "summary": "RHBZ#1093526", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0109", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0109" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: HTML content posted to SOAP endpoint could cause OOM errors" }, { "cve": "CVE-2014-0110", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093527" } ], "notes": [ { "category": "description", "text": "It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of disk space, possibly causing a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: Large invalid content could cause temporary space to fill", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0110" }, { "category": "external", "summary": "RHBZ#1093527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0110", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0110" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: Large invalid content could cause temporary space to fill" }, { "cve": "CVE-2014-3577", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2014-08-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1129074" } ], "notes": [ { "category": "description", "text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3577" }, { "category": "external", "summary": "RHBZ#1129074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3577" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577" } ], "release_date": "2014-08-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix" }, { "cve": "CVE-2014-3623", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2014-10-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1157304" } ], "notes": [ { "category": "description", "text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3623" }, { "category": "external", "summary": "RHBZ#1157304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3623" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623" } ], "release_date": "2014-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods" }, { "acknowledgments": [ { "names": [ "Ondra Lukas" ], "organization": "Red Hat Quality Engineering Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7827", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1160574" } ], "notes": [ { "category": "description", "text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.", "title": "Vulnerability description" }, { "category": "summary", "text": "Security: Wrong security context loaded when using SAML2 STS Login Module", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7827" }, { "category": "external", "summary": "RHBZ#1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7827" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Security: Wrong security context loaded when using SAML2 STS Login Module" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" }, { "acknowledgments": [ { "names": [ "Jeremy Lindop" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-8125", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169553" } ], "notes": [ { "category": "description", "text": "It was discovered that the jBPM runtime performed expansion of external parameter entities while executing BPMN2 files. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "jBPM: BPMN2 file processing XXE in Process Execution", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BPMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8125" }, { "category": "external", "summary": "RHBZ#1169553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8125", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8125" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125" } ], "release_date": "2014-12-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:37+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing\nthe update, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BPMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BPMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jBPM: BPMN2 file processing XXE in Process Execution" } ] }
rhsa-2015_0675
Vulnerability from csaf_redhat
Published
2015-03-11 16:51
Modified
2024-12-08 10:44
Summary
Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.1.0 update
Notes
Topic
Red Hat JBoss Data Virtualization 6.1.0, which fixes multiple security
issues and various bugs, is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Data Virtualization is a lean data integration solution that
provides easy, real-time, and unified data access across disparate sources
to multiple applications and users. JBoss Data Virtualization makes data
spread across physically distinct systems—such as multiple databases, XML
files, and even Hadoop systems—appear as a set of tables in a local
database.
The release of Red Hat JBoss Data Virtualization 6.1.0 serves as a
replacement for Red Hat JBoss Data Virtualization 6.0.0. It includes
various bug fixes, which are listed in the README file included with the
patch files.
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-5783 fix
CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-6153 fix
CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP,
8017298)
CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature
DoS Attack
CVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of
user-supplied content in outputText tags and EL expressions
CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file
CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding
input filter
CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs
CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content
length header
CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web
application
CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation
CVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding
input filter
CVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal
Entity (XXE)
CVE-2014-3490 RESTEasy: XXE via parameter entities
CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage
CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics
enforcement of SAML SubjectConfirmation methods
CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider
CVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread
state
Red Hat would like to thank James Roper of Typesafe for reporting
CVE-2014-0193, Alexander Papadakis for reporting CVE-2014-3530, and Rune
Steinseth of JProfessionals for reporting CVE-2014-8122. The CVE-2012-6153
issue was discovered by Florian Weimer of Red Hat Product Security, the
CVE-2014-0075 and CVE-2014-3490 issues were discovered by David Jorm of Red
Hat Product Security, and the CVE-2014-3481 issue was discovered by the Red
Hat JBoss Enterprise Application Platform QE team.
All users of Red Hat JBoss Data Virtualization 6.0.0 as provided from the
Red Hat Customer Portal are advised to apply this roll up patch.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Data Virtualization 6.1.0, which fixes multiple security\nissues and various bugs, is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Data Virtualization is a lean data integration solution that\nprovides easy, real-time, and unified data access across disparate sources\nto multiple applications and users. JBoss Data Virtualization makes data\nspread across physically distinct systems\u2014such as multiple databases, XML\nfiles, and even Hadoop systems\u2014appear as a set of tables in a local\ndatabase.\n\nThe release of Red Hat JBoss Data Virtualization 6.1.0 serves as a\nreplacement for Red Hat JBoss Data Virtualization 6.0.0. It includes\nvarious bug fixes, which are listed in the README file included with the\npatch files.\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-5783 fix\n\nCVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-6153 fix\n\nCVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP,\n8017298)\n\nCVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature\nDoS Attack\n\nCVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of\nuser-supplied content in outputText tags and EL expressions\n\nCVE-2014-0059 JBossSX/PicketBox: World readable audit.log file\n\nCVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs\n\nCVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content\nlength header\n\nCVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web\napplication\n\nCVE-2014-0193 netty: DoS via memory exhaustion during data aggregation\n\nCVE-2014-0227 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding\ninput filter\n\nCVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal\nEntity (XXE)\n\nCVE-2014-3490 RESTEasy: XXE via parameter entities\n\nCVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage\n\nCVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics\nenforcement of SAML SubjectConfirmation methods\n\nCVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider\n\nCVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread\nstate\n\nRed Hat would like to thank James Roper of Typesafe for reporting\nCVE-2014-0193, Alexander Papadakis for reporting CVE-2014-3530, and Rune\nSteinseth of JProfessionals for reporting CVE-2014-8122. The CVE-2012-6153\nissue was discovered by Florian Weimer of Red Hat Product Security, the\nCVE-2014-0075 and CVE-2014-3490 issues were discovered by David Jorm of Red\nHat Product Security, and the CVE-2014-3481 issue was discovered by the Red\nHat JBoss Enterprise Application Platform QE team.\n\nAll users of Red Hat JBoss Data Virtualization 6.0.0 as provided from the\nRed Hat Customer Portal are advised to apply this roll up patch.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0675", "url": "https://access.redhat.com/errata/RHSA-2015:0675" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=distributions\u0026version=6.1.0", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform\u0026downloadType=distributions\u0026version=6.1.0" }, { "category": "external", "summary": "1019176", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176" }, { "category": "external", "summary": "1045257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257" }, { "category": "external", "summary": "1063642", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642" }, { "category": "external", "summary": "1065139", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139" }, { "category": "external", "summary": "1072776", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776" }, { "category": "external", "summary": "1088342", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342" }, { "category": "external", "summary": "1092783", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783" }, { "category": "external", "summary": "1102030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030" }, { "category": "external", "summary": "1102038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038" }, { "category": "external", "summary": "1105242", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242" }, { "category": "external", "summary": "1107901", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901" }, { "category": "external", "summary": "1109196", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196" }, { "category": "external", "summary": "1112987", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987" }, { "category": "external", "summary": "1129074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074" }, { "category": "external", "summary": "1129916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916" }, { "category": "external", "summary": "1157304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0675.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.1.0 update", "tracking": { "current_release_date": "2024-12-08T10:44:25+00:00", "generator": { "date": "2024-12-08T10:44:25+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2015:0675", "initial_release_date": "2015-03-11T16:51:20+00:00", "revision_history": [ { "date": "2015-03-11T16:51:20+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-02-20T12:35:38+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-08T10:44:25+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Data Virtualization 6.1", "product": { "name": "Red Hat JBoss Data Virtualization 6.1", "product_id": "Red Hat JBoss Data Virtualization 6.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_virtualization:6.1" } } } ], "category": "product_family", "name": "Red Hat JBoss Data Virtualization" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Florian Weimer" ], "organization": "Red Hat Product Security", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2012-6153", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2012-11-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1129916" } ], "notes": [ { "category": "description", "text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-6153" }, { "category": "external", "summary": "RHBZ#1129916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153", "url": "https://www.cve.org/CVERecord?id=CVE-2012-6153" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153" } ], "release_date": "2014-08-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix" }, { "cve": "CVE-2013-4002", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2013-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1019176" } ], "notes": [ { "category": "description", "text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-4002" }, { "category": "external", "summary": "RHBZ#1019176", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002", "url": "https://www.cve.org/CVERecord?id=CVE-2013-4002" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html" } ], "release_date": "2013-10-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)" }, { "cve": "CVE-2013-4517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2013-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1045257" } ], "notes": [ { "category": "description", "text": "It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions (DTDs) to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "Java: Java XML Signature DoS Attack", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4, Fuse Mediation Router 2.7, 2.8 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nFuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4; Red Hat JBoss Enterprise Data Services Platform 5; Red Hat JBoss Enterprise Portal Platform 4 and 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-4517" }, { "category": "external", "summary": "RHBZ#1045257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4517", "url": "https://www.cve.org/CVERecord?id=CVE-2013-4517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517" } ], "release_date": "2013-11-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Java: Java XML Signature DoS Attack" }, { "cve": "CVE-2013-5855", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2014-02-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1065139" } ], "notes": [ { "category": "description", "text": "It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute arbitrary web script in the user\u0027s browser.", "title": "Vulnerability description" }, { "category": "summary", "text": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-5855" }, { "category": "external", "summary": "RHBZ#1065139", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1065139" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-5855", "url": "https://www.cve.org/CVERecord?id=CVE-2013-5855" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5855" }, { "category": "external", "summary": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209", "url": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/bc-p/6370209" } ], "release_date": "2014-02-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions" }, { "cve": "CVE-2014-0059", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "discovery_date": "2014-02-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1063642" } ], "notes": [ { "category": "description", "text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.", "title": "Vulnerability description" }, { "category": "summary", "text": "JBossSX/PicketBox: World readable audit.log file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0059" }, { "category": "external", "summary": "RHBZ#1063642", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0059" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059" } ], "release_date": "2014-05-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JBossSX/PicketBox: World readable audit.log file" }, { "acknowledgments": [ { "names": [ "David Jorm" ], "organization": "Red Hat Product Security", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-0075", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2014-02-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1072776" } ], "notes": [ { "category": "description", "text": "It was discovered that JBoss Web / Apache Tomcat did not limit the length of chunk sizes when using chunked transfer encoding. A remote attacker could use this flaw to perform a denial of service attack against JBoss Web / Apache Tomcat by streaming an unlimited quantity of data, leading to excessive consumption of server resources.", "title": "Vulnerability description" }, { "category": "summary", "text": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0075" }, { "category": "external", "summary": "RHBZ#1072776", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1072776" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0075", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0075" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0075" } ], "release_date": "2014-05-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter" }, { "cve": "CVE-2014-0096", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-04-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088342" } ], "notes": [ { "category": "description", "text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.", "title": "Vulnerability description" }, { "category": "summary", "text": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0096" }, { "category": "external", "summary": "RHBZ#1088342", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088342" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0096", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0096" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096" } ], "release_date": "2014-05-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs" }, { "cve": "CVE-2014-0099", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2014-05-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1102030" } ], "notes": [ { "category": "description", "text": "It was found that JBoss Web / Apache Tomcat did not check for overflowing values when parsing request content length headers. A remote attacker could use this flaw to perform an HTTP request smuggling attack on a JBoss Web / Apache Tomcat server located behind a reverse proxy that processed the content length header correctly.", "title": "Vulnerability description" }, { "category": "summary", "text": "Tomcat/JBossWeb: Request smuggling via malicious content length header", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Moderate security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0099" }, { "category": "external", "summary": "RHBZ#1102030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0099", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0099" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0099" } ], "release_date": "2014-05-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Tomcat/JBossWeb: Request smuggling via malicious content length header" }, { "cve": "CVE-2014-0119", "cwe": { "id": "CWE-470", "name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)" }, "discovery_date": "2014-05-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1102038" } ], "notes": [ { "category": "description", "text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.", "title": "Vulnerability description" }, { "category": "summary", "text": "Tomcat/JBossWeb: XML parser hijack by malicious web application", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0119" }, { "category": "external", "summary": "RHBZ#1102038", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0119" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119" } ], "release_date": "2014-05-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Tomcat/JBossWeb: XML parser hijack by malicious web application" }, { "acknowledgments": [ { "names": [ "James Roper" ], "organization": "Typesafe" } ], "cve": "CVE-2014-0193", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2014-04-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1092783" } ], "notes": [ { "category": "description", "text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "netty: DoS via memory exhaustion during data aggregation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0193" }, { "category": "external", "summary": "RHBZ#1092783", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0193" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "netty: DoS via memory exhaustion during data aggregation" }, { "cve": "CVE-2014-0227", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2014-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1109196" } ], "notes": [ { "category": "description", "text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0227" }, { "category": "external", "summary": "RHBZ#1109196", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0227" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227" }, { "category": "external", "summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43", "url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43" }, { "category": "external", "summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55", "url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55" } ], "release_date": "2015-02-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter" }, { "acknowledgments": [ { "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-3481", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-06-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1105242" } ], "notes": [ { "category": "description", "text": "It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity (XXE) attacks on RESTEasy applications accepting XML input.", "title": "Vulnerability description" }, { "category": "summary", "text": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3481" }, { "category": "external", "summary": "RHBZ#1105242", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1105242" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3481", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3481" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3481" } ], "release_date": "2014-06-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JAX-RS: Information disclosure via XML eXternal Entity (XXE)" }, { "acknowledgments": [ { "names": [ "David Jorm" ], "organization": "Red Hat Product Security", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-3490", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-06-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1107901" } ], "notes": [ { "category": "description", "text": "It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTEasy: XXE via parameter entities", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3490" }, { "category": "external", "summary": "RHBZ#1107901", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1107901" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3490", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3490" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3490" } ], "release_date": "2014-07-23T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTEasy: XXE via parameter entities" }, { "acknowledgments": [ { "names": [ "Alexander Papadakis" ] } ], "cve": "CVE-2014-3530", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-06-24T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1112987" } ], "notes": [ { "category": "description", "text": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "PicketLink: XXE via insecure DocumentBuilderFactory usage", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw could allow remote, unauthenticated attackers to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks. All systems hosting PicketLink applications using SAML Identity Providers and Service Providers may be affected. It is strongly advised that anyone running an affected system applies patches to address this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3530" }, { "category": "external", "summary": "RHBZ#1112987", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3530", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3530" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3530" } ], "release_date": "2014-07-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "PicketLink: XXE via insecure DocumentBuilderFactory usage" }, { "cve": "CVE-2014-3577", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2014-08-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1129074" } ], "notes": [ { "category": "description", "text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3577" }, { "category": "external", "summary": "RHBZ#1129074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3577" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577" } ], "release_date": "2014-08-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix" }, { "cve": "CVE-2014-3578", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2014-08-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1131882" } ], "notes": [ { "category": "description", "text": "A directory traversal flaw was found in the Spring Framework. A remote attacker could use this flaw to access arbitrary files on a server, and bypassing security restrictions that are otherwise in place.", "title": "Vulnerability description" }, { "category": "summary", "text": "Framework: Directory traversal", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3578" }, { "category": "external", "summary": "RHBZ#1131882", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1131882" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3578", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3578" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3578" }, { "category": "external", "summary": "http://www.pivotal.io/security/cve-2014-3578", "url": "http://www.pivotal.io/security/cve-2014-3578" }, { "category": "external", "summary": "https://jvn.jp/en/jp/JVN49154900/", "url": "https://jvn.jp/en/jp/JVN49154900/" } ], "release_date": "2014-09-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Framework: Directory traversal" }, { "cve": "CVE-2014-3623", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2014-10-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1157304" } ], "notes": [ { "category": "description", "text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3623" }, { "category": "external", "summary": "RHBZ#1157304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3623" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623" } ], "release_date": "2014-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Virtualization 6.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-03-11T16:51:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Data Virtualization installation (including its\ndatabases, applications, configuration files, and so on).\n\nNote that it is recommended to halt the Red Hat JBoss Data Virtualization\nserver by stopping the JBoss Application Server process before installing\nthis update, and then after installing the update, restart the Red Hat\nJBoss Data Virtualization server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss Data Virtualization 6.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0675" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Virtualization 6.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" } ] }
rhsa-2015_0215
Vulnerability from csaf_redhat
Published
2015-02-11 20:06
Modified
2024-11-22 09:00
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform
6.3.3 and fix multiple security issues, several bugs, and add various
enhancements are now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was found that the RESTEasy DocumentProvider did not set the
external-parameter-entities and external-general-entities features
appropriately, thus allowing external entity expansion. A remote attacker
able to send XML requests to a RESTEasy endpoint could use this flaw to
read files accessible to the user running the application server, and
potentially perform other more advanced XML eXternal Entity (XXE) attacks.
(CVE-2014-7839)
It was discovered that the Role Based Access Control (RBAC) implementation
did not sufficiently verify all authorization conditions that are required
by the Maintainer role to perform certain administrative actions.
An authenticated user with the Maintainer role could use this flaw to add,
modify, or undefine a limited set of attributes and their values, which
otherwise cannot be written to. (CVE-2014-7849)
It was discovered that the JBoss Application Server (WildFly) JacORB
subsystem incorrectly assigned socket-binding-ref sensitivity
classification for the security-domain attribute. An authenticated user
with a role that has access to attributes with socket-binding-ref and not
security-domain-ref sensitivity classification could use this flaw to
access sensitive information present in the security-domain attribute.
(CVE-2014-7853)
It was found that when processing undefined security domains, the
org.jboss.security.plugins.mapping.JBossMappingManager implementation would
fall back to the default security domain if it was available. A user with
valid credentials in the defined default domain, with a role that is valid
in the expected application domain, could perform actions that were
otherwise not available to them. When using the SAML2 STS Login Module,
JBossMappingManager exposed this issue due to the PicketLink Trust
SecurityActions implementation using a hardcoded default value when
defining the context. (CVE-2014-7827)
It was discovered that under specific conditions the conversation state
information stored in a thread-local variable was not sanitized correctly
when the conversation ended. This could lead to a race condition that could
potentially expose sensitive information from a previous conversation to
the current conversation. (CVE-2014-8122)
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were
discovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application
Platform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of
the Red Hat Quality Engineering Team.
This release serves as a replacement for Red Hat JBoss Enterprise
Application Platform 6.3.2, and includes bug fixes and enhancements.
Documentation for these changes is available from the link in the
References section.
All users of Red Hat JBoss Enterprise Application Platform 6.3 as provided
from the Red Hat Customer Portal are advised to apply this update.
The JBoss server process must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform\n6.3.3 and fix multiple security issues, several bugs, and add various\nenhancements are now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was found that the RESTEasy DocumentProvider did not set the\nexternal-parameter-entities and external-general-entities features\nappropriately, thus allowing external entity expansion. A remote attacker\nable to send XML requests to a RESTEasy endpoint could use this flaw to\nread files accessible to the user running the application server, and\npotentially perform other more advanced XML eXternal Entity (XXE) attacks.\n(CVE-2014-7839)\n\nIt was discovered that the Role Based Access Control (RBAC) implementation\ndid not sufficiently verify all authorization conditions that are required\nby the Maintainer role to perform certain administrative actions.\nAn authenticated user with the Maintainer role could use this flaw to add,\nmodify, or undefine a limited set of attributes and their values, which\notherwise cannot be written to. (CVE-2014-7849)\n\nIt was discovered that the JBoss Application Server (WildFly) JacORB\nsubsystem incorrectly assigned socket-binding-ref sensitivity\nclassification for the security-domain attribute. An authenticated user\nwith a role that has access to attributes with socket-binding-ref and not\nsecurity-domain-ref sensitivity classification could use this flaw to\naccess sensitive information present in the security-domain attribute.\n(CVE-2014-7853)\n\nIt was found that when processing undefined security domains, the\norg.jboss.security.plugins.mapping.JBossMappingManager implementation would\nfall back to the default security domain if it was available. A user with\nvalid credentials in the defined default domain, with a role that is valid\nin the expected application domain, could perform actions that were\notherwise not available to them. When using the SAML2 STS Login Module,\nJBossMappingManager exposed this issue due to the PicketLink Trust\nSecurityActions implementation using a hardcoded default value when\ndefining the context. (CVE-2014-7827)\n\nIt was discovered that under specific conditions the conversation state\ninformation stored in a thread-local variable was not sanitized correctly\nwhen the conversation ended. This could lead to a race condition that could\npotentially expose sensitive information from a previous conversation to\nthe current conversation. (CVE-2014-8122)\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were\ndiscovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application\nPlatform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of\nthe Red Hat Quality Engineering Team.\n\nThis release serves as a replacement for Red Hat JBoss Enterprise\nApplication Platform 6.3.2, and includes bug fixes and enhancements.\nDocumentation for these changes is available from the link in the\nReferences section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3 as provided\nfrom the Red Hat Customer Portal are advised to apply this update.\nThe JBoss server process must be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0215", "url": "https://access.redhat.com/errata/RHSA-2015:0215" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.3.0", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.3.0" }, { "category": "external", "summary": "1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0215.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update", "tracking": { "current_release_date": "2024-11-22T09:00:39+00:00", "generator": { "date": "2024-11-22T09:00:39+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0215", "initial_release_date": "2015-02-11T20:06:34+00:00", "revision_history": [ { "date": "2015-02-11T20:06:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-02-11T20:06:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T09:00:39+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 6.3", "product": { "name": "Red Hat JBoss Enterprise Application Platform 6.3", "product_id": "Red Hat JBoss Enterprise Application Platform 6.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.3" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Ondra Lukas" ], "organization": "Red Hat Quality Engineering Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7827", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1160574" } ], "notes": [ { "category": "description", "text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.", "title": "Vulnerability description" }, { "category": "summary", "text": "Security: Wrong security context loaded when using SAML2 STS Login Module", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7827" }, { "category": "external", "summary": "RHBZ#1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7827" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:06:34+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.", "product_ids": [ "Red Hat JBoss Enterprise Application Platform 6.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0215" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Security: Wrong security context loaded when using SAML2 STS Login Module" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:06:34+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.", "product_ids": [ "Red Hat JBoss Enterprise Application Platform 6.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0215" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7849", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165170" } ], "notes": [ { "category": "description", "text": "It was discovered that the Role Based Access Control (RBAC) implementation did not sufficiently verify all authorization conditions that are required by the Maintainer role to perform certain administrative actions. An authenticated user with the Maintainer role could use this flaw to add, modify, or undefine a limited set of attributes and their values, which otherwise cannot be written to.", "title": "Vulnerability description" }, { "category": "summary", "text": "Management: Limited RBAC authorization bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of Red Hat JBoss Enterprise Application Platform before 6.2.0 as they did not include support for role-based access control (RBAC).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7849" }, { "category": "external", "summary": "RHBZ#1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7849", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7849" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:06:34+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.", "product_ids": [ "Red Hat JBoss Enterprise Application Platform 6.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0215" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Management: Limited RBAC authorization bypass" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7853", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165522" } ], "notes": [ { "category": "description", "text": "It was discovered that the JBoss Application Server (WildFly) JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref sensitivity classification could use this flaw to access sensitive information present in the security-domain attribute.", "title": "Vulnerability description" }, { "category": "summary", "text": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7853" }, { "category": "external", "summary": "RHBZ#1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7853", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7853" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:06:34+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.", "product_ids": [ "Red Hat JBoss Enterprise Application Platform 6.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0215" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:06:34+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.", "product_ids": [ "Red Hat JBoss Enterprise Application Platform 6.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0215" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Enterprise Application Platform 6.3" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" } ] }
rhsa-2015_0773
Vulnerability from csaf_redhat
Published
2015-04-01 14:48
Modified
2024-11-22 09:00
Summary
Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 update
Notes
Topic
Red Hat JBoss Data Grid 6.4.1, which fixes several security issues,
multiple bugs, and adds various enhancements, is now available from the Red
Hat Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Data Grid is a distributed in-memory data grid, based on
Infinispan.
This release of Red Hat JBoss Data Grid 6.4.1 serves as a replacement for
Red Hat JBoss Data Grid 6.4.0. It includes various bug fixes and
enhancements, which are detailed in the Red Hat JBoss Data Grid 6.4.1
Release Notes. The Release Notes are available at:
https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Data_Grid/
This update also fixes the following security issues:
It was found that a prior countermeasure in Apache WSS4J for
Bleichenbacher's attack on XML Encryption (CVE-2011-2487) threw an
exception that permitted an attacker to determine the failure of the
attempted attack, thereby leaving WSS4J vulnerable to the attack.
The original flaw allowed a remote attacker to recover the entire plain
text form of a symmetric key. (CVE-2015-0226)
A resource consumption issue was found in the way Xerces-J handled XML
declarations. A remote attacker could use an XML document with a specially
crafted declaration using a long pseudo-attribute name that, when parsed by
an application using Xerces-J, would cause that application to use an
excessive amount of CPU. (CVE-2013-4002)
It was found that the RESTEasy DocumentProvider did not set the
external-parameter-entities and external-general-entities features
appropriately, thus allowing external entity expansion. A remote attacker
able to send XML requests to a RESTEasy endpoint could use this flaw to
read files accessible to the user running the application server, and
potentially perform other more advanced XML eXternal Entity (XXE) attacks.
(CVE-2014-7839)
It was found that Apache WSS4J permitted bypass of the
requireSignedEncryptedDataElements configuration property via XML Signature
wrapping attacks. A remote attacker could use this flaw to modify the
contents of a signed request. (CVE-2015-0227)
It was discovered that under specific conditions the conversation state
information stored in a thread-local variable in JBoss Weld was not
sanitized correctly when the conversation ended. This could lead to a race
condition that could potentially expose sensitive information from a
previous conversation to the current conversation. (CVE-2014-8122)
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue.
All users of Red Hat JBoss Data Grid 6.4.0 as provided from the Red Hat
Customer Portal are advised to upgrade to Red Hat JBoss Data Grid 6.4.1.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Data Grid 6.4.1, which fixes several security issues,\nmultiple bugs, and adds various enhancements, is now available from the Red\nHat Customer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Data Grid is a distributed in-memory data grid, based on\nInfinispan.\n\nThis release of Red Hat JBoss Data Grid 6.4.1 serves as a replacement for\nRed Hat JBoss Data Grid 6.4.0. It includes various bug fixes and\nenhancements, which are detailed in the Red Hat JBoss Data Grid 6.4.1\nRelease Notes. The Release Notes are available at:\nhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Data_Grid/\n\nThis update also fixes the following security issues:\n\nIt was found that a prior countermeasure in Apache WSS4J for\nBleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an\nexception that permitted an attacker to determine the failure of the\nattempted attack, thereby leaving WSS4J vulnerable to the attack.\nThe original flaw allowed a remote attacker to recover the entire plain\ntext form of a symmetric key. (CVE-2015-0226)\n\nA resource consumption issue was found in the way Xerces-J handled XML\ndeclarations. A remote attacker could use an XML document with a specially\ncrafted declaration using a long pseudo-attribute name that, when parsed by\nan application using Xerces-J, would cause that application to use an\nexcessive amount of CPU. (CVE-2013-4002)\n\nIt was found that the RESTEasy DocumentProvider did not set the\nexternal-parameter-entities and external-general-entities features\nappropriately, thus allowing external entity expansion. A remote attacker\nable to send XML requests to a RESTEasy endpoint could use this flaw to\nread files accessible to the user running the application server, and\npotentially perform other more advanced XML eXternal Entity (XXE) attacks.\n(CVE-2014-7839)\n\nIt was found that Apache WSS4J permitted bypass of the\nrequireSignedEncryptedDataElements configuration property via XML Signature\nwrapping attacks. A remote attacker could use this flaw to modify the\ncontents of a signed request. (CVE-2015-0227)\n\nIt was discovered that under specific conditions the conversation state\ninformation stored in a thread-local variable in JBoss Weld was not\nsanitized correctly when the conversation ended. This could lead to a race\ncondition that could potentially expose sensitive information from a\nprevious conversation to the current conversation. (CVE-2014-8122)\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue.\n\nAll users of Red Hat JBoss Data Grid 6.4.0 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Data Grid 6.4.1.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0773", "url": "https://access.redhat.com/errata/RHSA-2015:0773" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=data.grid\u0026version=6.4.1", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=data.grid\u0026version=6.4.1" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Data_Grid/", "url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Data_Grid/" }, { "category": "external", "summary": "1019176", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "1191446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446" }, { "category": "external", "summary": "1191451", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0773.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 update", "tracking": { "current_release_date": "2024-11-22T09:00:25+00:00", "generator": { "date": "2024-11-22T09:00:25+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0773", "initial_release_date": "2015-04-01T14:48:20+00:00", "revision_history": [ { "date": "2015-04-01T14:48:20+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-02-20T12:35:35+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T09:00:25+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Data Grid 6.4", "product": { "name": "Red Hat JBoss Data Grid 6.4", "product_id": "Red Hat JBoss Data Grid 6.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:6.4.1" } } } ], "category": "product_family", "name": "Red Hat JBoss Data Grid" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "cve": "CVE-2013-4002", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2013-10-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1019176" } ], "notes": [ { "category": "description", "text": "A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Server 4 and 5; Red Hat JBoss Enterprise Web Platform 5; Red Hat JBoss SOA Platform 4 and 5; and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Grid 6.4" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-4002" }, { "category": "external", "summary": "RHBZ#1019176", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1019176" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4002", "url": "https://www.cve.org/CVERecord?id=CVE-2013-4002" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4002" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html" } ], "release_date": "2013-10-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-01T14:48:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Data Grid installation.", "product_ids": [ "Red Hat JBoss Data Grid 6.4" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0773" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss Data Grid 6.4" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: XML parsing Denial of Service (JAXP, 8017298)" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Grid 6.4" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-01T14:48:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Data Grid installation.", "product_ids": [ "Red Hat JBoss Data Grid 6.4" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0773" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Grid 6.4" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Grid 6.4" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-01T14:48:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Data Grid installation.", "product_ids": [ "Red Hat JBoss Data Grid 6.4" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0773" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Grid 6.4" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" }, { "cve": "CVE-2015-0226", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2015-02-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1191446" } ], "notes": [ { "category": "description", "text": "It was found that a prior countermeasure in Apache WSS4J for Bleichenbacher\u0027s attack on XML Encryption (CVE-2011-2487) threw an exception that permitted an attacker to determine the failure of the attempted attack, thereby leaving WSS4J vulnerable to the attack. The original flaw allowed a remote attacker to recover the entire plain text form of a symmetric key.", "title": "Vulnerability description" }, { "category": "summary", "text": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Grid 6.4" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0226" }, { "category": "external", "summary": "RHBZ#1191446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191446" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0226", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0226" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0226" } ], "release_date": "2015-02-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-01T14:48:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Data Grid installation.", "product_ids": [ "Red Hat JBoss Data Grid 6.4" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0773" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 7.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Grid 6.4" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "wss4j: Apache WSS4J is vulnerable to Bleichenbacher\u0027s attack (incomplete fix for CVE-2011-2487)" }, { "cve": "CVE-2015-0227", "cwe": { "id": "CWE-358", "name": "Improperly Implemented Security Check for Standard" }, "discovery_date": "2015-02-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1191451" } ], "notes": [ { "category": "description", "text": "It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request.", "title": "Vulnerability description" }, { "category": "summary", "text": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Data Grid 6.4" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-0227" }, { "category": "external", "summary": "RHBZ#1191451", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191451" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0227", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0227" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0227" } ], "release_date": "2015-02-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-01T14:48:20+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Data Grid installation.", "product_ids": [ "Red Hat JBoss Data Grid 6.4" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0773" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Data Grid 6.4" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "wss4j: Apache WSS4J doesn\u0027t correctly enforce the requireSignedEncryptedDataElements property" } ] }
rhsa-2015_0218
Vulnerability from csaf_redhat
Published
2015-02-11 20:36
Modified
2024-11-22 09:00
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform
6.3.3 and fix multiple security issues, several bugs, and add various
enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was found that the RESTEasy DocumentProvider did not set the
external-parameter-entities and external-general-entities features
appropriately, thus allowing external entity expansion. A remote attacker
able to send XML requests to a RESTEasy endpoint could use this flaw to
read files accessible to the user running the application server, and
potentially perform other more advanced XML eXternal Entity (XXE) attacks.
(CVE-2014-7839)
It was discovered that the Role Based Access Control (RBAC) implementation
did not sufficiently verify all authorization conditions that are required
by the Maintainer role to perform certain administrative actions.
An authenticated user with the Maintainer role could use this flaw to add,
modify, or undefine a limited set of attributes and their values, which
otherwise cannot be written to. (CVE-2014-7849)
It was discovered that the JBoss Application Server (WildFly) JacORB
subsystem incorrectly assigned socket-binding-ref sensitivity
classification for the security-domain attribute. An authenticated user
with a role that has access to attributes with socket-binding-ref and not
security-domain-ref sensitivity classification could use this flaw to
access sensitive information present in the security-domain attribute.
(CVE-2014-7853)
It was found that when processing undefined security domains, the
org.jboss.security.plugins.mapping.JBossMappingManager implementation would
fall back to the default security domain if it was available. A user with
valid credentials in the defined default domain, with a role that is valid
in the expected application domain, could perform actions that were
otherwise not available to them. When using the SAML2 STS Login Module,
JBossMappingManager exposed this issue due to the PicketLink Trust
SecurityActions implementation using a hardcoded default value when
defining the context. (CVE-2014-7827)
It was discovered that under specific conditions the conversation state
information stored in a thread-local variable was not sanitized correctly
when the conversation ended. This could lead to a race condition that could
potentially expose sensitive information from a previous conversation to
the current conversation. (CVE-2014-8122)
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were
discovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application
Platform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of
the Red Hat Quality Engineering Team.
This release serves as a replacement for Red Hat JBoss Enterprise
Application Platform 6.3.2, and includes bug fixes and enhancements.
Documentation for these changes is available from the link in the
References section.
All users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat
Enterprise Linux 6 are advised to upgrade to these updated packages.
The JBoss server process must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform\n6.3.3 and fix multiple security issues, several bugs, and add various\nenhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was found that the RESTEasy DocumentProvider did not set the\nexternal-parameter-entities and external-general-entities features\nappropriately, thus allowing external entity expansion. A remote attacker\nable to send XML requests to a RESTEasy endpoint could use this flaw to\nread files accessible to the user running the application server, and\npotentially perform other more advanced XML eXternal Entity (XXE) attacks.\n(CVE-2014-7839)\n\nIt was discovered that the Role Based Access Control (RBAC) implementation\ndid not sufficiently verify all authorization conditions that are required\nby the Maintainer role to perform certain administrative actions.\nAn authenticated user with the Maintainer role could use this flaw to add,\nmodify, or undefine a limited set of attributes and their values, which\notherwise cannot be written to. (CVE-2014-7849)\n\nIt was discovered that the JBoss Application Server (WildFly) JacORB\nsubsystem incorrectly assigned socket-binding-ref sensitivity\nclassification for the security-domain attribute. An authenticated user\nwith a role that has access to attributes with socket-binding-ref and not\nsecurity-domain-ref sensitivity classification could use this flaw to\naccess sensitive information present in the security-domain attribute.\n(CVE-2014-7853)\n\nIt was found that when processing undefined security domains, the\norg.jboss.security.plugins.mapping.JBossMappingManager implementation would\nfall back to the default security domain if it was available. A user with\nvalid credentials in the defined default domain, with a role that is valid\nin the expected application domain, could perform actions that were\notherwise not available to them. When using the SAML2 STS Login Module,\nJBossMappingManager exposed this issue due to the PicketLink Trust\nSecurityActions implementation using a hardcoded default value when\ndefining the context. (CVE-2014-7827)\n\nIt was discovered that under specific conditions the conversation state\ninformation stored in a thread-local variable was not sanitized correctly\nwhen the conversation ended. This could lead to a race condition that could\npotentially expose sensitive information from a previous conversation to\nthe current conversation. (CVE-2014-8122)\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were\ndiscovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application\nPlatform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of\nthe Red Hat Quality Engineering Team.\n\nThis release serves as a replacement for Red Hat JBoss Enterprise\nApplication Platform 6.3.2, and includes bug fixes and enhancements.\nDocumentation for these changes is available from the link in the\nReferences section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat\nEnterprise Linux 6 are advised to upgrade to these updated packages.\nThe JBoss server process must be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0218", "url": "https://access.redhat.com/errata/RHSA-2015:0218" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893\u0026product=appplatform\u0026version=6.3\u0026downloadType=patches#eap63_details", "url": "https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893\u0026product=appplatform\u0026version=6.3\u0026downloadType=patches#eap63_details" }, { "category": "external", "summary": "1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "1179416", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179416" }, { "category": "external", "summary": "1179419", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179419" }, { "category": "external", "summary": "1179427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179427" }, { "category": "external", "summary": "1179430", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179430" }, { "category": "external", "summary": "1179434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179434" }, { "category": "external", "summary": "1179437", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179437" }, { "category": "external", "summary": "1179440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179440" }, { "category": "external", "summary": "1179444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179444" }, { "category": "external", "summary": "1181732", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181732" }, { "category": "external", "summary": "1181735", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181735" }, { "category": "external", "summary": "1181738", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181738" }, { "category": "external", "summary": "1181742", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181742" }, { "category": "external", "summary": "1181747", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181747" }, { "category": "external", "summary": "1181750", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181750" }, { "category": "external", "summary": "1181758", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181758" }, { "category": "external", "summary": "1181761", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181761" }, { "category": "external", "summary": "1181838", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181838" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0218.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update", "tracking": { "current_release_date": "2024-11-22T09:00:32+00:00", "generator": { "date": "2024-11-22T09:00:32+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0218", "initial_release_date": "2015-02-11T20:36:41+00:00", "revision_history": [ { "date": "2015-02-11T20:36:41+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-02-11T20:36:41+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T09:00:32+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product": { "name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform" }, { "branches": [ { "category": "product_version", "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.4-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "product": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "product_id": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-18.redhat_4.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-spi@2.3.1-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-console@2.2.12-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-hal@2.2.12-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-modules@1.3.5-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_id": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/wss4j@1.6.17-2.SP1_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/weld-core@1.1.28-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossts@4.17.26-1.Final_redhat_1.1.ep6.el7?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "product": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "product_id": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy@2.3.8-13.SP4_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.4-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "product": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "product_id": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/apache-cxf@2.7.14-1.redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpserver@1.0.2-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hornetq@2.3.21.2-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossweb@7.4.10-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-ejb-client@1.0.28-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "product": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "product_id": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketbox@4.0.19-10.SP10_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-marshalling@1.4.10-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "product": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "product_id": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/glassfish-jsf-eap6@2.1.28-6.redhat_7.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "product": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "product_id": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/guava-libraries@13.0.1-4.redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "product": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "product_id": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-security-negotiation@2.3.6-1.Final_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "product": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "product_id": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-saaj-1.3-impl@1.3.16-11.SP1_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product": { "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_id": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-core-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_id": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product": { "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_id": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-envers-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product": { "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_id": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-entitymanager-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product": { "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_id": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-infinispan-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "product": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "product_id": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-istack-commons@2.6.1-12.redhat_3.1.ep6.el7?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-sar@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-naming@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-javadocs@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-appclient@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-server@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "product": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "product_id": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-federation@2.5.3-16.SP16_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "product": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "product_id": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-bindings@2.5.3-15.SP16_redhat_1.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-weld@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cli@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jdr@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-core-security@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cmp@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jmx@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-connector@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-standalone@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-logging@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-embedded@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-mail@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-client-all@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-protocol@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-webservices@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-domain@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-appclient@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-core@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-threads@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-transactions@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-security@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-clustering@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-remoting@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-version@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-network@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-bundles@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jpa@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-web@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-messaging@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-xts@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsf@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-pojo@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-product-eap@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_id": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.4-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "product": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "product_id": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-18.redhat_4.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-spi@2.3.1-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-console@2.2.12-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-hal@2.2.12-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-modules@1.3.5-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src", "product": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src", "product_id": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wss4j@1.6.17-2.SP1_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "product_id": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/weld-core@1.1.28-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossts@4.17.26-1.Final_redhat_1.1.ep6.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "product": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "product_id": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy@2.3.8-13.SP4_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.4-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "product": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "product_id": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/apache-cxf@2.7.14-1.redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "product_id": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpserver@1.0.2-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "product_id": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hornetq@2.3.21.2-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossweb@7.4.10-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-ejb-client@1.0.28-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "product": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "product_id": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketbox@4.0.19-10.SP10_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-marshalling@1.4.10-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "product": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "product_id": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/glassfish-jsf-eap6@2.1.28-6.redhat_7.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "product": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "product_id": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/guava-libraries@13.0.1-4.redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "product": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "product_id": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-security-negotiation@2.3.6-1.Final_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "product": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "product_id": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-saaj-1.3-impl@1.3.16-11.SP1_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "product": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "product_id": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "product": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "product_id": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-istack-commons@2.6.1-12.redhat_3.1.ep6.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-sar@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-naming@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-javadocs@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-appclient@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-server@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "product": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "product_id": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-federation@2.5.3-16.SP16_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "product": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "product_id": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-bindings@2.5.3-15.SP16_redhat_1.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-weld@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cli@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jdr@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-core-security@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cmp@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jmx@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-connector@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-standalone@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-logging@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-embedded@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-mail@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-client-all@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-protocol@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-webservices@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-domain@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-appclient@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-core@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-threads@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-transactions@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-security@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-clustering@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-remoting@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-version@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-network@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-bundles@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jpa@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-web@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-messaging@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-xts@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsf@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_id": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-pojo@7.4.3-3.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-product-eap@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } }, { "category": "product_version", "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_id": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.4.3-2.Final_redhat_2.1.ep6.el7?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch" }, "product_reference": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src" }, "product_reference": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch" }, "product_reference": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src" }, "product_reference": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch" }, "product_reference": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src" }, "product_reference": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch" }, "product_reference": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src" }, "product_reference": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch" }, "product_reference": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch" }, "product_reference": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src" }, "product_reference": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch" }, "product_reference": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch" }, "product_reference": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch" }, "product_reference": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch" }, "product_reference": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src" }, "product_reference": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch" }, "product_reference": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src" }, "product_reference": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch" }, "product_reference": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src" }, "product_reference": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch" }, "product_reference": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src" }, "product_reference": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch" }, "product_reference": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src" }, "product_reference": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch" }, "product_reference": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src" }, "product_reference": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch" }, "product_reference": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src" }, "product_reference": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch" }, "product_reference": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src" }, "product_reference": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch" }, "product_reference": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "relates_to_product_reference": "7Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server", "product_id": "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" }, "product_reference": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src", "relates_to_product_reference": "7Server-JBEAP-6.3" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Ondra Lukas" ], "organization": "Red Hat Quality Engineering Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7827", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1160574" } ], "notes": [ { "category": "description", "text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.", "title": "Vulnerability description" }, { "category": "summary", "text": "Security: Wrong security context loaded when using SAML2 STS Login Module", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7827" }, { "category": "external", "summary": "RHBZ#1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7827" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:36:41+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0218" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Security: Wrong security context loaded when using SAML2 STS Login Module" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:36:41+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0218" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7849", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165170" } ], "notes": [ { "category": "description", "text": "It was discovered that the Role Based Access Control (RBAC) implementation did not sufficiently verify all authorization conditions that are required by the Maintainer role to perform certain administrative actions. An authenticated user with the Maintainer role could use this flaw to add, modify, or undefine a limited set of attributes and their values, which otherwise cannot be written to.", "title": "Vulnerability description" }, { "category": "summary", "text": "Management: Limited RBAC authorization bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of Red Hat JBoss Enterprise Application Platform before 6.2.0 as they did not include support for role-based access control (RBAC).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7849" }, { "category": "external", "summary": "RHBZ#1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7849", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7849" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:36:41+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0218" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Management: Limited RBAC authorization bypass" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7853", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165522" } ], "notes": [ { "category": "description", "text": "It was discovered that the JBoss Application Server (WildFly) JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref sensitivity classification could use this flaw to access sensitive information present in the security-domain attribute.", "title": "Vulnerability description" }, { "category": "summary", "text": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7853" }, { "category": "external", "summary": "RHBZ#1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7853", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7853" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:36:41+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0218" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:36:41+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0218" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.noarch", "7Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el7.src", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.noarch", "7Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el7.src", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el7.src", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.noarch", "7Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el7.src", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el7.src", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.noarch", "7Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" } ] }
rhsa-2015_0850
Vulnerability from csaf_redhat
Published
2015-04-16 16:02
Modified
2024-11-25 11:57
Summary
Red Hat Security Advisory: Red Hat JBoss BRMS 6.1.0 update
Notes
Topic
Red Hat JBoss BRMS 6.1.0, which fixes multiple security issues, several
bugs, and adds various enhancements, is now available from the Red Hat
Customer Portal.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss BRMS is a business rules management system for the
management, storage, creation, modification, and deployment of JBoss Rules.
This release of Red Hat JBoss BRMS 6.1.0 serves as a replacement for Red
Hat JBoss BRMS 6.0.3, and includes bug fixes and enhancements. Refer to the
Red Hat JBoss BRMS 6.1.0 Release Notes for information on the most
significant of these changes. The Release Notes are available at
https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/
The following security issues are also fixed with this release,
descriptions of which can be found on the respective CVE pages linked in
the References section.
CVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-5783 fix
CVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws
handlers
CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature
DoS Attack
CVE-2013-7397 async-http-client: SSL/TLS certificate verification is
disabled under certain conditions
CVE-2013-7398 async-http-client: missing hostname verification for SSL
certificates
CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid
SAML Tokens as valid
CVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a
Symmetric EncryptBeforeSigning policy
CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file
CVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause
OOM errors
CVE-2014-0110 Apache CXF: Large invalid content could cause temporary space
to fill
CVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname
verification bypass, incomplete CVE-2012-6153 fix
CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics
enforcement of SAML SubjectConfirmation methods
CVE-2014-7827 JBoss Security: Wrong security context loaded when using
SAML2 STS Login Module
CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider
CVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread
state
CVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian
Weimer of Red Hat Product Security; the CVE-2014-8125 was discovered by
Jeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra
Lukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was
discovered by Richard Opalka and Arun Neelicattu of Red Hat.
All users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer
Portal are advised to upgrade to Red Hat JBoss BRMS 6.1.0.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss BRMS 6.1.0, which fixes multiple security issues, several\nbugs, and adds various enhancements, is now available from the Red Hat\nCustomer Portal.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss BRMS is a business rules management system for the\nmanagement, storage, creation, modification, and deployment of JBoss Rules.\n\nThis release of Red Hat JBoss BRMS 6.1.0 serves as a replacement for Red\nHat JBoss BRMS 6.0.3, and includes bug fixes and enhancements. Refer to the\nRed Hat JBoss BRMS 6.1.0 Release Notes for information on the most\nsignificant of these changes. The Release Notes are available at\nhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/\n\nThe following security issues are also fixed with this release,\ndescriptions of which can be found on the respective CVE pages linked in\nthe References section.\n\nCVE-2012-6153 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-5783 fix\n\nCVE-2013-2133 JBoss WS: EJB3 role restrictions are not applied to jaxws\nhandlers\n\nCVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature\nDoS Attack\n\nCVE-2013-7397 async-http-client: SSL/TLS certificate verification is\ndisabled under certain conditions\n\nCVE-2013-7398 async-http-client: missing hostname verification for SSL\ncertificates\n\nCVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid\nSAML Tokens as valid\n\nCVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a\nSymmetric EncryptBeforeSigning policy\n\nCVE-2014-0059 JBossSX/PicketBox: World readable audit.log file\n\nCVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause\nOOM errors\n\nCVE-2014-0110 Apache CXF: Large invalid content could cause temporary space\nto fill\n\nCVE-2014-3577 Jakarta Commons httpclient / Apache CXF: SSL hostname\nverification bypass, incomplete CVE-2012-6153 fix\n\nCVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics\nenforcement of SAML SubjectConfirmation methods\n\nCVE-2014-7827 JBoss Security: Wrong security context loaded when using\nSAML2 STS Login Module\n\nCVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider\n\nCVE-2014-8122 JBoss Weld: Limited information disclosure via stale thread\nstate\n\nCVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2012-6153 issue was discovered by Florian\nWeimer of Red Hat Product Security; the CVE-2014-8125 was discovered by\nJeremy Lindop of Red Hat; the CVE-2014-7827 issue was discovered by Ondra\nLukas of the Red Hat Quality Engineering Team; the CVE-2013-2133 issue was\ndiscovered by Richard Opalka and Arun Neelicattu of Red Hat.\n\nAll users of Red Hat JBoss BRMS 6.0.3 as provided from the Red Hat Customer\nPortal are advised to upgrade to Red Hat JBoss BRMS 6.1.0.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0850", "url": "https://access.redhat.com/errata/RHSA-2015:0850" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.1.0", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms\u0026downloadType=distributions\u0026version=6.1.0" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/", "url": "https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_BRMS/" }, { "category": "external", "summary": "969924", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924" }, { "category": "external", "summary": "1045257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257" }, { "category": "external", "summary": "1063642", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642" }, { "category": "external", "summary": "1093526", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526" }, { "category": "external", "summary": "1093527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527" }, { "category": "external", "summary": "1093529", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529" }, { "category": "external", "summary": "1093530", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530" }, { "category": "external", "summary": "1129074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074" }, { "category": "external", "summary": "1129916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916" }, { "category": "external", "summary": "1133769", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769" }, { "category": "external", "summary": "1133773", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773" }, { "category": "external", "summary": "1157304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304" }, { "category": "external", "summary": "1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "1169553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0850.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss BRMS 6.1.0 update", "tracking": { "current_release_date": "2024-11-25T11:57:30+00:00", "generator": { "date": "2024-11-25T11:57:30+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0850", "initial_release_date": "2015-04-16T16:02:45+00:00", "revision_history": [ { "date": "2015-04-16T16:02:45+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-02-20T12:35:45+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-25T11:57:30+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss BRMS 6.0", "product": { "name": "Red Hat JBoss BRMS 6.0", "product_id": "Red Hat JBoss BRMS 6.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_brms:6.0" } } } ], "category": "product_family", "name": "Red Hat Decision Manager" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Florian Weimer" ], "organization": "Red Hat Product Security", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2012-6153", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2012-11-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1129916" } ], "notes": [ { "category": "description", "text": "It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Virtualization 6. A future update may address this issue.\n\nThis issue did not affect the jakarta-commons-httpclient packages as shipped with Red Hat Enterprise Linux 5, 6, and 7, and httpcomponents-client packages as shipped with Red Hat Enterprise Linux 7.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-6153" }, { "category": "external", "summary": "RHBZ#1129916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129916" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-6153", "url": "https://www.cve.org/CVERecord?id=CVE-2012-6153" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6153" } ], "release_date": "2014-08-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix" }, { "acknowledgments": [ { "names": [ "Richard Opalka" ] }, { "names": [ "Arun Neelicattu" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2013-2133", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "discovery_date": "2013-06-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "969924" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.", "title": "Vulnerability description" }, { "category": "summary", "text": "WS: EJB3 role restrictions are not applied to jaxws handlers", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-2133" }, { "category": "external", "summary": "RHBZ#969924", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=969924" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2133", "url": "https://www.cve.org/CVERecord?id=CVE-2013-2133" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2133" } ], "release_date": "2013-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "WS: EJB3 role restrictions are not applied to jaxws handlers" }, { "cve": "CVE-2013-4517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2013-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1045257" } ], "notes": [ { "category": "description", "text": "It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions (DTDs) to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "Java: Java XML Signature DoS Attack", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4, Fuse Mediation Router 2.7, 2.8 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nFuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4; Red Hat JBoss Enterprise Data Services Platform 5; Red Hat JBoss Enterprise Portal Platform 4 and 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-4517" }, { "category": "external", "summary": "RHBZ#1045257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4517", "url": "https://www.cve.org/CVERecord?id=CVE-2013-4517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517" } ], "release_date": "2013-11-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Java: Java XML Signature DoS Attack" }, { "cve": "CVE-2013-7397", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "discovery_date": "2014-08-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1133769" } ], "notes": [ { "category": "description", "text": "It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also used client certificates. A man-in-the-middle (MITM) attacker could use this flaw to spoof a valid certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-7397" }, { "category": "external", "summary": "RHBZ#1133769", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133769" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7397", "url": "https://www.cve.org/CVERecord?id=CVE-2013-7397" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7397" } ], "release_date": "2013-07-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "async-http-client: SSL/TLS certificate verification is disabled under certain conditions" }, { "cve": "CVE-2013-7398", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2014-08-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1133773" } ], "notes": [ { "category": "description", "text": "It was found that async-http-client did not verify that the server hostname matched the domain name in the subject\u0027s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name.", "title": "Vulnerability description" }, { "category": "summary", "text": "async-http-client: missing hostname verification for SSL certificates", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-7398" }, { "category": "external", "summary": "RHBZ#1133773", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1133773" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7398", "url": "https://www.cve.org/CVERecord?id=CVE-2013-7398" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7398" } ], "release_date": "2013-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "async-http-client: missing hostname verification for SSL certificates" }, { "cve": "CVE-2014-0034", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093529" } ], "notes": [ { "category": "description", "text": "It was found that the SecurityTokenService (STS), provided as a part of Apache CXF, could under certain circumstances accept invalid SAML tokens as valid. A remote attacker could use a specially crafted SAML token to gain access to an application that uses STS for validation of SAML tokens.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0034" }, { "category": "external", "summary": "RHBZ#1093529", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093529" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0034", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0034" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0034" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid" }, { "cve": "CVE-2014-0035", "cwe": { "id": "CWE-522", "name": "Insufficiently Protected Credentials" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093530" } ], "notes": [ { "category": "description", "text": "It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0035" }, { "category": "external", "summary": "RHBZ#1093530", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093530" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0035", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0035" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0035" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy" }, { "cve": "CVE-2014-0059", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "discovery_date": "2014-02-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1063642" } ], "notes": [ { "category": "description", "text": "It was found that the security auditing functionality provided by PicketBox and JBossSX, both security frameworks for Java applications, used a world-readable audit.log file to record sensitive information. A local user could possibly use this flaw to gain access to the sensitive information in the audit.log file.", "title": "Vulnerability description" }, { "category": "summary", "text": "JBossSX/PicketBox: World readable audit.log file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0059" }, { "category": "external", "summary": "RHBZ#1063642", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1063642" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0059", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0059" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0059" } ], "release_date": "2014-05-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JBossSX/PicketBox: World readable audit.log file" }, { "cve": "CVE-2014-0109", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093526" } ], "notes": [ { "category": "description", "text": "A denial of service flaw was found in the way Apache CXF created error messages for certain POST requests. A remote attacker could send a specially crafted request which, when processed by an application using Apache CXF, could consume an excessive amount of memory on the system, possibly triggering an Out Of Memory (OOM) error.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: HTML content posted to SOAP endpoint could cause OOM errors", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0109" }, { "category": "external", "summary": "RHBZ#1093526", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093526" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0109", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0109" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0109" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: HTML content posted to SOAP endpoint could cause OOM errors" }, { "cve": "CVE-2014-0110", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2014-05-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1093527" } ], "notes": [ { "category": "description", "text": "It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of disk space, possibly causing a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: Large invalid content could cause temporary space to fill", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0110" }, { "category": "external", "summary": "RHBZ#1093527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093527" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0110", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0110" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0110" } ], "release_date": "2014-05-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: Large invalid content could cause temporary space to fill" }, { "cve": "CVE-2014-3577", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "discovery_date": "2014-08-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1129074" } ], "notes": [ { "category": "description", "text": "It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject\u0027s Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/solutions/1165533\n\nThis issue affects the versions of HttpComponents Client as shipped with Red Hat JBoss Data Grid 6 and Red Hat JBoss Data Virtualization 6; and ModeShape Client as shipped with Red Hat JBoss Data Virtualization 6. However, this flaw is not known to be exploitable under any supported scenario in Red Hat JBoss Data Grid 6 and JBoss Data Virtualization 6. A future update may address this issue.\n\nRed Hat JBoss Enterprise Application Platform 4, Red Hat JBoss SOA Platform 4, and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/\n\nFuse ESB 4, Fuse Message Broker 5.2, 5.3, 5.4 and Fuse Services Framework 2.3, 2.4 are now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3577" }, { "category": "external", "summary": "RHBZ#1129074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1129074" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3577", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3577" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3577" } ], "release_date": "2014-08-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix" }, { "cve": "CVE-2014-3623", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2014-10-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1157304" } ], "notes": [ { "category": "description", "text": "It was found that Apache WSS4J (Web Services Security for Java), as used by Apache CXF with the TransportBinding, did not, by default, properly enforce all security requirements associated with SAML SubjectConfirmation methods. A remote attacker could use this flaw to perform various types of spoofing attacks on web service endpoints secured by WSS4J that rely on SAML for authentication.", "title": "Vulnerability description" }, { "category": "summary", "text": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods", "title": "Vulnerability summary" }, { "category": "other", "text": "Fuse ESB Enterprise 7 is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/\n\nRed Hat JBoss SOA Platform 5 and Red Hat JBoss BRMS 5 are now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware Product Life Cycle: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-3623" }, { "category": "external", "summary": "RHBZ#1157304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157304" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3623", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3623" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3623" } ], "release_date": "2014-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods" }, { "acknowledgments": [ { "names": [ "Ondra Lukas" ], "organization": "Red Hat Quality Engineering Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7827", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1160574" } ], "notes": [ { "category": "description", "text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.", "title": "Vulnerability description" }, { "category": "summary", "text": "Security: Wrong security context loaded when using SAML2 STS Login Module", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7827" }, { "category": "external", "summary": "RHBZ#1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7827" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Security: Wrong security context loaded when using SAML2 STS Login Module" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" }, { "acknowledgments": [ { "names": [ "Jeremy Lindop" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-8125", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169553" } ], "notes": [ { "category": "description", "text": "It was discovered that the jBPM runtime performed expansion of external parameter entities while executing BPMN2 files. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "jBPM: BPMN2 file processing XXE in Process Execution", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss BRMS 6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8125" }, { "category": "external", "summary": "RHBZ#1169553", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169553" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8125", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8125" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8125" } ], "release_date": "2014-12-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-16T16:02:45+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting installation, including all applications, configuration files,\ndatabases and database settings, and so on.\n\nIt is recommended to halt the server by stopping the JBoss Application\nServer process before installing this update, and then after installing the\nupdate, restart the server by starting the JBoss Application Server\nprocess.", "product_ids": [ "Red Hat JBoss BRMS 6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0850" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss BRMS 6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jBPM: BPMN2 file processing XXE in Process Execution" } ] }
rhsa-2015_0920
Vulnerability from csaf_redhat
Published
2015-04-30 16:09
Modified
2024-11-22 09:00
Summary
Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.2 update
Notes
Topic
Red Hat JBoss Operations Network 3.3 update 2, which fixes three security
issues and several bugs, is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Operations Network is a middleware management solution that
provides a single point of control to deploy, manage, and monitor JBoss
Enterprise Middleware, applications, and services.
This JBoss Operations Network 3.3.2 release serves as a replacement for
JBoss Operations Network 3.3.1, and includes several bug fixes. Refer to
the Customer Portal page linked in the References section for information
on the most significant of these changes.
The following security issue is also fixed with this release:
It was discovered that the Role Based Access Control (RBAC) implementation
did not sufficiently verify all authorization conditions that are required
by the Maintainer role to perform certain administrative actions.
An authenticated user with the Maintainer role could use this flaw to add,
modify, or undefine a limited set of attributes and their values, which
otherwise cannot be written to. (CVE-2014-7849)
It was discovered that the JBoss Application Server (WildFly) JacORB
subsystem incorrectly assigned socket-binding-ref sensitivity
classification for the security-domain attribute. An authenticated user
with a role that has access to attributes with socket-binding-ref and not
security-domain-ref sensitivity classification could use this flaw to
access sensitive information present in the security-domain attribute.
(CVE-2014-7853)
It was discovered that under specific conditions the conversation state
information stored in a thread-local variable in JBoss Weld was not
sanitized correctly when the conversation ended. This could lead to a race
condition that could potentially expose sensitive information from a
previous conversation to the current conversation. (CVE-2014-8122)
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
CVE-2014-8122. The CVE-2014-7849 and CVE-2014-7853 issues were
discovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application
Platform Team.
All users of JBoss Operations Network 3.3.1 as provided from the Red Hat
Customer Portal are advised to upgrade to JBoss Operations Network 3.3.2.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Operations Network 3.3 update 2, which fixes three security\nissues and several bugs, is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Operations Network is a middleware management solution that\nprovides a single point of control to deploy, manage, and monitor JBoss\nEnterprise Middleware, applications, and services.\n\nThis JBoss Operations Network 3.3.2 release serves as a replacement for\nJBoss Operations Network 3.3.1, and includes several bug fixes. Refer to\nthe Customer Portal page linked in the References section for information\non the most significant of these changes.\n\nThe following security issue is also fixed with this release:\n\nIt was discovered that the Role Based Access Control (RBAC) implementation\ndid not sufficiently verify all authorization conditions that are required\nby the Maintainer role to perform certain administrative actions.\nAn authenticated user with the Maintainer role could use this flaw to add,\nmodify, or undefine a limited set of attributes and their values, which\notherwise cannot be written to. (CVE-2014-7849)\n\nIt was discovered that the JBoss Application Server (WildFly) JacORB\nsubsystem incorrectly assigned socket-binding-ref sensitivity\nclassification for the security-domain attribute. An authenticated user\nwith a role that has access to attributes with socket-binding-ref and not\nsecurity-domain-ref sensitivity classification could use this flaw to\naccess sensitive information present in the security-domain attribute.\n(CVE-2014-7853)\n\nIt was discovered that under specific conditions the conversation state\ninformation stored in a thread-local variable in JBoss Weld was not\nsanitized correctly when the conversation ended. This could lead to a race\ncondition that could potentially expose sensitive information from a\nprevious conversation to the current conversation. (CVE-2014-8122)\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nCVE-2014-8122. The CVE-2014-7849 and CVE-2014-7853 issues were\ndiscovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application\nPlatform Team.\n\nAll users of JBoss Operations Network 3.3.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to JBoss Operations Network 3.3.2.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0920", "url": "https://access.redhat.com/errata/RHSA-2015:0920" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em\u0026downloadType=securityPatches\u0026version=3.3", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em\u0026downloadType=securityPatches\u0026version=3.3" }, { "category": "external", "summary": "1089495", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1089495" }, { "category": "external", "summary": "1147098", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1147098" }, { "category": "external", "summary": "1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "1176162", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1176162" }, { "category": "external", "summary": "1185375", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185375" }, { "category": "external", "summary": "1187645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1187645" }, { "category": "external", "summary": "1188743", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1188743" }, { "category": "external", "summary": "1194690", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1194690" }, { "category": "external", "summary": "1198034", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198034" }, { "category": "external", "summary": "1198086", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198086" }, { "category": "external", "summary": "1200493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1200493" }, { "category": "external", "summary": "1200579", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1200579" }, { "category": "external", "summary": "1202327", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202327" }, { "category": "external", "summary": "1206387", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1206387" }, { "category": "external", "summary": "1206641", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1206641" }, { "category": "external", "summary": "1206671", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1206671" }, { "category": "external", "summary": "1207393", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1207393" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0920.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.2 update", "tracking": { "current_release_date": "2024-11-22T09:00:21+00:00", "generator": { "date": "2024-11-22T09:00:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0920", "initial_release_date": "2015-04-30T16:09:30+00:00", "revision_history": [ { "date": "2015-04-30T16:09:30+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-04-30T16:09:30+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T09:00:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Operations Network 3.3", "product": { "name": "Red Hat JBoss Operations Network 3.3", "product_id": "Red Hat JBoss Operations Network 3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_operations_network:3.3" } } } ], "category": "product_family", "name": "Red Hat JBoss Operations Network" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7849", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165170" } ], "notes": [ { "category": "description", "text": "It was discovered that the Role Based Access Control (RBAC) implementation did not sufficiently verify all authorization conditions that are required by the Maintainer role to perform certain administrative actions. An authenticated user with the Maintainer role could use this flaw to add, modify, or undefine a limited set of attributes and their values, which otherwise cannot be written to.", "title": "Vulnerability description" }, { "category": "summary", "text": "Management: Limited RBAC authorization bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of Red Hat JBoss Enterprise Application Platform before 6.2.0 as they did not include support for role-based access control (RBAC).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Operations Network 3.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7849" }, { "category": "external", "summary": "RHBZ#1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7849", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7849" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-30T16:09:30+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.2 Release Notes for\ninstallation information.", "product_ids": [ "Red Hat JBoss Operations Network 3.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0920" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Operations Network 3.3" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Management: Limited RBAC authorization bypass" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7853", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165522" } ], "notes": [ { "category": "description", "text": "It was discovered that the JBoss Application Server (WildFly) JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref sensitivity classification could use this flaw to access sensitive information present in the security-domain attribute.", "title": "Vulnerability description" }, { "category": "summary", "text": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Operations Network 3.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7853" }, { "category": "external", "summary": "RHBZ#1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7853", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7853" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-30T16:09:30+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.2 Release Notes for\ninstallation information.", "product_ids": [ "Red Hat JBoss Operations Network 3.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0920" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Operations Network 3.3" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Operations Network 3.3" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-30T16:09:30+00:00", "details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting JBoss Operations Network installation (including its databases,\napplications, configuration files, the JBoss Operations Network server\u0027s\nfile system directory, and so on).\n\nRefer to the JBoss Operations Network 3.3.2 Release Notes for\ninstallation information.", "product_ids": [ "Red Hat JBoss Operations Network 3.3" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0920" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "Red Hat JBoss Operations Network 3.3" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" } ] }
rhsa-2015_0217
Vulnerability from csaf_redhat
Published
2015-02-11 20:16
Modified
2024-11-22 09:00
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update
Notes
Topic
Updated packages that provide Red Hat JBoss Enterprise Application Platform
6.3.3 and fix multiple security issues, several bugs, and add various
enhancements are now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
It was found that the RESTEasy DocumentProvider did not set the
external-parameter-entities and external-general-entities features
appropriately, thus allowing external entity expansion. A remote attacker
able to send XML requests to a RESTEasy endpoint could use this flaw to
read files accessible to the user running the application server, and
potentially perform other more advanced XML eXternal Entity (XXE) attacks.
(CVE-2014-7839)
It was discovered that the Role Based Access Control (RBAC) implementation
did not sufficiently verify all authorization conditions that are required
by the Maintainer role to perform certain administrative actions.
An authenticated user with the Maintainer role could use this flaw to add,
modify, or undefine a limited set of attributes and their values, which
otherwise cannot be written to. (CVE-2014-7849)
It was discovered that the JBoss Application Server (WildFly) JacORB
subsystem incorrectly assigned socket-binding-ref sensitivity
classification for the security-domain attribute. An authenticated user
with a role that has access to attributes with socket-binding-ref and not
security-domain-ref sensitivity classification could use this flaw to
access sensitive information present in the security-domain attribute.
(CVE-2014-7853)
It was found that when processing undefined security domains, the
org.jboss.security.plugins.mapping.JBossMappingManager implementation would
fall back to the default security domain if it was available. A user with
valid credentials in the defined default domain, with a role that is valid
in the expected application domain, could perform actions that were
otherwise not available to them. When using the SAML2 STS Login Module,
JBossMappingManager exposed this issue due to the PicketLink Trust
SecurityActions implementation using a hardcoded default value when
defining the context. (CVE-2014-7827)
It was discovered that under specific conditions the conversation state
information stored in a thread-local variable was not sanitized correctly
when the conversation ended. This could lead to a race condition that could
potentially expose sensitive information from a previous conversation to
the current conversation. (CVE-2014-8122)
Red Hat would like to thank Rune Steinseth of JProfessionals for reporting
the CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were
discovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application
Platform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of
the Red Hat Quality Engineering Team.
This release serves as a replacement for Red Hat JBoss Enterprise
Application Platform 6.3.2, and includes bug fixes and enhancements.
Documentation for these changes is available from the link in the
References section.
All users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat
Enterprise Linux 6 are advised to upgrade to these updated packages.
The JBoss server process must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform\n6.3.3 and fix multiple security issues, several bugs, and add various\nenhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nIt was found that the RESTEasy DocumentProvider did not set the\nexternal-parameter-entities and external-general-entities features\nappropriately, thus allowing external entity expansion. A remote attacker\nable to send XML requests to a RESTEasy endpoint could use this flaw to\nread files accessible to the user running the application server, and\npotentially perform other more advanced XML eXternal Entity (XXE) attacks.\n(CVE-2014-7839)\n\nIt was discovered that the Role Based Access Control (RBAC) implementation\ndid not sufficiently verify all authorization conditions that are required\nby the Maintainer role to perform certain administrative actions.\nAn authenticated user with the Maintainer role could use this flaw to add,\nmodify, or undefine a limited set of attributes and their values, which\notherwise cannot be written to. (CVE-2014-7849)\n\nIt was discovered that the JBoss Application Server (WildFly) JacORB\nsubsystem incorrectly assigned socket-binding-ref sensitivity\nclassification for the security-domain attribute. An authenticated user\nwith a role that has access to attributes with socket-binding-ref and not\nsecurity-domain-ref sensitivity classification could use this flaw to\naccess sensitive information present in the security-domain attribute.\n(CVE-2014-7853)\n\nIt was found that when processing undefined security domains, the\norg.jboss.security.plugins.mapping.JBossMappingManager implementation would\nfall back to the default security domain if it was available. A user with\nvalid credentials in the defined default domain, with a role that is valid\nin the expected application domain, could perform actions that were\notherwise not available to them. When using the SAML2 STS Login Module,\nJBossMappingManager exposed this issue due to the PicketLink Trust\nSecurityActions implementation using a hardcoded default value when\ndefining the context. (CVE-2014-7827)\n\nIt was discovered that under specific conditions the conversation state\ninformation stored in a thread-local variable was not sanitized correctly\nwhen the conversation ended. This could lead to a race condition that could\npotentially expose sensitive information from a previous conversation to\nthe current conversation. (CVE-2014-8122)\n\nRed Hat would like to thank Rune Steinseth of JProfessionals for reporting\nthe CVE-2014-8122 issue. The CVE-2014-7849 and CVE-2014-7853 issues were\ndiscovered by Darran Lofthouse of the Red Hat JBoss Enterprise Application\nPlatform Team, and the CVE-2014-7827 issue was discovered by Ondra Lukas of\nthe Red Hat Quality Engineering Team.\n\nThis release serves as a replacement for Red Hat JBoss Enterprise\nApplication Platform 6.3.2, and includes bug fixes and enhancements.\nDocumentation for these changes is available from the link in the\nReferences section.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat\nEnterprise Linux 6 are advised to upgrade to these updated packages.\nThe JBoss server process must be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0217", "url": "https://access.redhat.com/errata/RHSA-2015:0217" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893\u0026product=appplatform\u0026version=6.3\u0026downloadType=patches#eap63_details", "url": "https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=33893\u0026product=appplatform\u0026version=6.3\u0026downloadType=patches#eap63_details" }, { "category": "external", "summary": "1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "1179414", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179414" }, { "category": "external", "summary": "1179417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179417" }, { "category": "external", "summary": "1179425", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179425" }, { "category": "external", "summary": "1179428", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179428" }, { "category": "external", "summary": "1179432", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179432" }, { "category": "external", "summary": "1179435", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179435" }, { "category": "external", "summary": "1179438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179438" }, { "category": "external", "summary": "1179442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1179442" }, { "category": "external", "summary": "1181730", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181730" }, { "category": "external", "summary": "1181733", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181733" }, { "category": "external", "summary": "1181736", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181736" }, { "category": "external", "summary": "1181740", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181740" }, { "category": "external", "summary": "1181745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181745" }, { "category": "external", "summary": "1181748", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181748" }, { "category": "external", "summary": "1181756", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181756" }, { "category": "external", "summary": "1181759", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181759" }, { "category": "external", "summary": "1181836", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181836" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0217.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update", "tracking": { "current_release_date": "2024-11-22T09:00:25+00:00", "generator": { "date": "2024-11-22T09:00:25+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0217", "initial_release_date": "2015-02-11T20:16:58+00:00", "revision_history": [ { "date": "2015-02-11T20:16:58+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-02-11T20:16:58+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T09:00:25+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product": { "name": "Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform" }, { "branches": [ { "category": "product_version", "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.4-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "product": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "product_id": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-18.redhat_4.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-spi@2.3.1-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-console@2.2.12-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-hal@2.2.12-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-modules@1.3.5-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_id": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/wss4j@1.6.17-2.SP1_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/weld-core@1.1.28-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossts@4.17.26-1.Final_redhat_1.1.ep6.el6?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "product": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "product_id": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy@2.3.8-13.SP4_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.4-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "product": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "product_id": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/apache-cxf@2.7.14-1.redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpserver@1.0.2-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hornetq@2.3.21.2-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossweb@7.4.10-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-ejb-client@1.0.28-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "product": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "product_id": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketbox@4.0.19-10.SP10_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-marshalling@1.4.10-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "product": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "product_id": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/glassfish-jsf-eap6@2.1.28-6.redhat_7.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "product": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "product_id": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/guava-libraries@13.0.1-4.redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "product": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "product_id": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-security-negotiation@2.3.6-1.Final_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "product": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "product_id": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-saaj-1.3-impl@1.3.16-11.SP1_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product": { "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_id": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-core-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_id": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product": { "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_id": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-envers-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product": { "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_id": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-entitymanager-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product": { "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_id": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-infinispan-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "product": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "product_id": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-istack-commons@2.6.1-12.redhat_3.1.ep6.el6?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "product": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "product_id": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-federation@2.5.3-16.SP16_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-javadocs@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jdr@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-remoting@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jmx@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-weld@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-mail@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "product": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "product_id": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-bindings@2.5.3-15.SP16_redhat_1.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-network@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-version@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-naming@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-security@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-logging@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jpa@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-embedded@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-sar@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-xts@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-connector@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cli@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-threads@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-transactions@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-core-security@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsf@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-web@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-pojo@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-client-all@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-appclient@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-protocol@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cmp@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-messaging@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-webservices@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-clustering@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-server@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-appclient@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-product-eap@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-bundles@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-domain@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-core@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-standalone@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_id": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.4-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "product": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "product_id": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-18.redhat_4.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-spi@2.3.1-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-console@2.2.12-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-hal@2.2.12-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-modules@1.3.5-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src", "product": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src", "product_id": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/wss4j@1.6.17-2.SP1_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "product_id": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/weld-core@1.1.28-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossts@4.17.26-1.Final_redhat_1.1.ep6.el6?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "product": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "product_id": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy@2.3.8-13.SP4_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.4-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "product": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "product_id": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/apache-cxf@2.7.14-1.redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "product_id": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpserver@1.0.2-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "product_id": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hornetq@2.3.21.2-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossweb@7.4.10-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-ejb-client@1.0.28-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "product": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "product_id": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketbox@4.0.19-10.SP10_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-marshalling@1.4.10-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "product": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "product_id": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/glassfish-jsf-eap6@2.1.28-6.redhat_7.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "product": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "product_id": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/guava-libraries@13.0.1-4.redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "product": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "product_id": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-security-negotiation@2.3.6-1.Final_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "product": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "product_id": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-saaj-1.3-impl@1.3.16-11.SP1_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "product": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "product_id": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.17-2.SP1_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "product": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "product_id": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/sun-istack-commons@2.6.1-12.redhat_3.1.ep6.el6?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "product": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "product_id": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-federation@2.5.3-16.SP16_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-javadocs@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jdr@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-remoting@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jmx@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-weld@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-mail@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "product": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "product_id": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/picketlink-bindings@2.5.3-15.SP16_redhat_1.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-network@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-version@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-naming@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-security@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-logging@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jpa@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-embedded@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-sar@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-xts@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-connector@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cli@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-threads@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-transactions@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-core-security@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jsf@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-web@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-pojo@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-client-all@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-appclient@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-protocol@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-ee@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-cmp@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-messaging@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-webservices@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-clustering@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_id": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jboss-as-server@7.4.3-3.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-appclient@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-product-eap@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-bundles@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-domain@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-core@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-standalone@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } }, { "category": "product_version", "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_id": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.4.3-2.Final_redhat_2.1.ep6.el6?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch" }, "product_reference": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src" }, "product_reference": "antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch" }, "product_reference": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src" }, "product_reference": "apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch" }, "product_reference": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src" }, "product_reference": "glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch" }, "product_reference": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src" }, "product_reference": "guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch" }, "product_reference": "hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch" }, "product_reference": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src" }, "product_reference": "hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch" }, "product_reference": "hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch" }, "product_reference": "hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch" }, "product_reference": "hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch" }, "product_reference": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src" }, "product_reference": "jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch" }, "product_reference": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src" }, "product_reference": "picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch" }, "product_reference": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src" }, "product_reference": "picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch" }, "product_reference": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src" }, "product_reference": "picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch" }, "product_reference": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src" }, "product_reference": "resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch" }, "product_reference": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src" }, "product_reference": "sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch" }, "product_reference": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src" }, "product_reference": "sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch" }, "product_reference": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src" }, "product_reference": "weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch" }, "product_reference": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "relates_to_product_reference": "6Server-JBEAP-6.3" }, { "category": "default_component_of", "full_product_name": { "name": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server", "product_id": "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" }, "product_reference": "wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src", "relates_to_product_reference": "6Server-JBEAP-6.3" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Ondra Lukas" ], "organization": "Red Hat Quality Engineering Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7827", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1160574" } ], "notes": [ { "category": "description", "text": "It was found that when processing undefined security domains, the org.jboss.security.plugins.mapping.JBossMappingManager implementation would fall back to the default security domain if it was available. A user with valid credentials in the defined default domain, with a role that is valid in the expected application domain, could perform actions that were otherwise not available to them. When using the SAML2 STS Login Module, JBossMappingManager exposed this issue due to the PicketLink Trust SecurityActions implementation using a hardcoded default value when defining the context.", "title": "Vulnerability description" }, { "category": "summary", "text": "Security: Wrong security context loaded when using SAML2 STS Login Module", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; Red Hat JBoss Enterprise SOA Platform 4 and 5; and Red Hat JBoss Enterprise Web Platform 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7827" }, { "category": "external", "summary": "RHBZ#1160574", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160574" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7827", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7827" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7827" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:16:58+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0217" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Security: Wrong security context loaded when using SAML2 STS Login Module" }, { "cve": "CVE-2014-7839", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-11-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165328" } ], "notes": [ { "category": "description", "text": "It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XML eXternal Entity (XXE) attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "RESTeasy: External entities expanded by DocumentProvider", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Web Framework Kit has moved out of maintenance phase and is no longer supported by Red Hat Product Security. This issue is not currently planned to be addressed in any future updates. For additional information, refer to the Red Hat JBoss Middleware Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7839" }, { "category": "external", "summary": "RHBZ#1165328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165328" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7839", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7839" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7839" } ], "release_date": "2014-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:16:58+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0217" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "RESTeasy: External entities expanded by DocumentProvider" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7849", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165170" } ], "notes": [ { "category": "description", "text": "It was discovered that the Role Based Access Control (RBAC) implementation did not sufficiently verify all authorization conditions that are required by the Maintainer role to perform certain administrative actions. An authenticated user with the Maintainer role could use this flaw to add, modify, or undefine a limited set of attributes and their values, which otherwise cannot be written to.", "title": "Vulnerability description" }, { "category": "summary", "text": "Management: Limited RBAC authorization bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of Red Hat JBoss Enterprise Application Platform before 6.2.0 as they did not include support for role-based access control (RBAC).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7849" }, { "category": "external", "summary": "RHBZ#1165170", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165170" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7849", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7849" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7849" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:16:58+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0217" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Management: Limited RBAC authorization bypass" }, { "acknowledgments": [ { "names": [ "Darran Lofthouse" ], "organization": "Red Hat JBoss Enterprise Application Platform Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-7853", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1165522" } ], "notes": [ { "category": "description", "text": "It was discovered that the JBoss Application Server (WildFly) JacORB subsystem incorrectly assigned socket-binding-ref sensitivity classification for the security-domain attribute. An authenticated user with a role that has access to attributes with socket-binding-ref and not security-domain-ref sensitivity classification could use this flaw to access sensitive information present in the security-domain attribute.", "title": "Vulnerability description" }, { "category": "summary", "text": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-7853" }, { "category": "external", "summary": "RHBZ#1165522", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165522" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-7853", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7853" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7853" } ], "release_date": "2015-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:16:58+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0217" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute" }, { "acknowledgments": [ { "names": [ "Rune Steinseth" ], "organization": "JProfessionals" } ], "cve": "CVE-2014-8122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2014-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1169237" } ], "notes": [ { "category": "description", "text": "It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous conversation to the current conversation.", "title": "Vulnerability description" }, { "category": "summary", "text": "Weld: Limited information disclosure via stale thread state", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-8122" }, { "category": "external", "summary": "RHBZ#1169237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1169237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8122", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8122" } ], "release_date": "2014-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-02-11T20:16:58+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0217" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.noarch", "6Server-JBEAP-6.3:antlr-eap6-0:2.7.7-18.redhat_4.1.ep6.el6.src", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:apache-cxf-0:2.7.14-1.redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.noarch", "6Server-JBEAP-6.3:glassfish-jsf-eap6-0:2.1.28-6.redhat_7.1.ep6.el6.src", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:guava-libraries-0:13.0.1-4.redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-core-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:hibernate4-entitymanager-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-envers-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hibernate4-infinispan-eap6-0:4.2.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:hornetq-0:2.3.21.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:httpserver-0:1.0.2-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-appclient-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cli-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-client-all-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-clustering-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-cmp-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-connector-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-console-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-controller-client-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-core-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-repository-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-deployment-scanner-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-http-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-domain-management-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ee-deployment-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-ejb3-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-embedded-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-host-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jacorb-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jaxrs-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jdr-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jpa-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsf-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-jsr77-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-logging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-mail-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-management-client-content-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-messaging-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-modcluster-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-naming-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-network-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-configadmin-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-osgi-service-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-picketlink-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-platform-mbean-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-pojo-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-process-controller-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-protocol-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-remoting-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-sar-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-security-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-server-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-system-jmx-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-threads-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-transactions-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-version-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-web-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-webservices-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-weld-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-as-xts-0:7.4.3-3.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-ejb-client-0:1.0.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-hal-0:2.2.12-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-marshalling-0:1.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-modules-0:1.3.5-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-remoting3-0:3.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jboss-security-negotiation-0:2.3.6-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-appclient-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-bundles-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-core-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-domain-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-javadocs-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-modules-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-product-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-standalone-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossas-welcome-content-eap-0:7.4.3-2.Final_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossts-1:4.17.26-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossweb-0:7.4.10-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-cxf-0:4.3.4-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:jbossws-spi-0:2.3.1-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketbox-0:4.0.19-10.SP10_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-bindings-0:2.5.3-15.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:picketlink-federation-0:2.5.3-16.SP16_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-istack-commons-1:2.6.1-12.redhat_3.1.ep6.el6.src", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.noarch", "6Server-JBEAP-6.3:sun-saaj-1.3-impl-0:1.3.16-11.SP1_redhat_2.1.ep6.el6.src", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:weld-core-0:1.1.28-1.Final_redhat_1.1.ep6.el6.src", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.noarch", "6Server-JBEAP-6.3:wss4j-0:1.6.17-2.SP1_redhat_1.1.ep6.el6.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Weld: Limited information disclosure via stale thread state" } ] }
gsd-2014-8122
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2014-8122", "description": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.", "id": "GSD-2014-8122", "references": [ "https://access.redhat.com/errata/RHSA-2015:0920", "https://access.redhat.com/errata/RHSA-2015:0851", "https://access.redhat.com/errata/RHSA-2015:0850", "https://access.redhat.com/errata/RHSA-2015:0773", "https://access.redhat.com/errata/RHSA-2015:0675", "https://access.redhat.com/errata/RHSA-2015:0218", "https://access.redhat.com/errata/RHSA-2015:0217", "https://access.redhat.com/errata/RHSA-2015:0216", "https://access.redhat.com/errata/RHSA-2015:0215" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2014-8122" ], "details": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.", "id": "GSD-2014-8122", "modified": "2023-12-13T01:22:49.020735Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2014-8122", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745", "refsource": "CONFIRM", "url": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745" }, { "name": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65", "refsource": "CONFIRM", "url": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65" }, { "name": "redhat-jboss-cve20148122-info-disc(100892)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100892" }, { "name": "RHSA-2015:0675", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html" }, { "name": "RHSA-2015:0773", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html" }, { "name": "RHSA-2015:0920", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0920.html" }, { "name": "RHSA-2015:0850", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html" }, { "name": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086", "refsource": "CONFIRM", "url": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086" }, { "name": "74252", "refsource": "BID", "url": "http://www.securityfocus.com/bid/74252" }, { "name": "RHSA-2015:0215", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0215.html" }, { "name": "RHSA-2015:0851", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html" }, { "name": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml", "refsource": "MISC", "url": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml" }, { "name": "RHSA-2015:0217", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0217.html" }, { "name": "RHSA-2015:0218", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0218.html" }, { "name": "RHSA-2015:0216", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-0216.html" }, { "name": "1031741", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1031741" } ] } }, "gitlab.com": { "advisories": [ { "affected_range": "(,2.2.8)", "affected_versions": "All versions before 2.2.8", "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe_ids": [ "CWE-1035", "CWE-362", "CWE-937" ], "date": "2021-08-30", "description": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.", "fixed_versions": [ "2.2.8" ], "identifier": "CVE-2014-8122", "identifiers": [ "GHSA-338v-3958-8v8r", "CVE-2014-8122" ], "not_impacted": "All versions starting from 2.2.8", "package_slug": "maven/org.jboss.weld/weld-core-bom", "pubdate": "2020-06-10", "solution": "Upgrade to version 2.2.8 or above.", "title": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "urls": [ "https://nvd.nist.gov/vuln/detail/CVE-2014-8122", "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745", "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086", "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65", "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml", "https://github.com/advisories/GHSA-338v-3958-8v8r" ], "uuid": "d6c867be-dbe9-43cb-b068-3b14b1df18a4" }, { "affected_range": "[2-alpha0,2.2.7.Final],[3-alpha0,3.0.0.Alpha1]", "affected_versions": "all versions starting from 2-alpha0 up to 2.2.7.final, all versions starting from 3-alpha0 up to 3.0.0.alpha1", "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe_ids": [ "CWE-1035", "CWE-362", "CWE-937" ], "date": "2017-09-07", "description": "Race condition in this package allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.", "fixed_versions": [ "2.2.8.Final", "3.0.0.Alpha3" ], "identifier": "CVE-2014-8122", "identifiers": [ "CVE-2014-8122" ], "not_impacted": "All versions before 3-alpha0, all versions after 3.0.0.alpha1, all versions before 2-alpha0, all versions after 2.2.7.final", "package_slug": "maven/org.jboss.weld/weld-core-impl", "pubdate": "2015-02-13", "solution": "Upgrade to versions 2.2.8.Final, 3.0.0.Alpha3 or above.", "title": "Limited information disclosure via stale thread state", "urls": [ "https://bugzilla.redhat.com/CVE-2014-8122" ], "uuid": "b30b93cf-e981-4d80-b1b5-a9c74b82f5a1" }, { "affected_range": "[1,1.2.0.Beta1],[2,2.2.7.Final],[3.Alpha0,3.0.0.Alpha1]", "affected_versions": "All versions starting from 1 up to 1.2.0.Beta1, all versions starting from 2 up to 2.2.7.final, all versions starting from 3.Alpha0 up to 3.0.0.Alpha1", "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe_ids": [ "CWE-1035", "CWE-362", "CWE-937" ], "date": "2017-09-07", "description": "Race condition in JBoss Weld Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.", "fixed_versions": [ "2.2.8.Final", "3.0.0.Alpha3" ], "identifier": "CVE-2014-8122", "identifiers": [ "CVE-2014-8122" ], "not_impacted": "All versions before 1, all versions after 1.2.0.Beta1 before 2, all versions after 2.2.7.Final before 3.Alpha0, all versions after 3.0.0.Alpha1", "package_slug": "maven/org.jboss.weld/weld-core", "pubdate": "2015-02-13", "solution": "Upgrade to versions 2.2.8.Final, 3.0.0.Alpha3 or above.", "title": "Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)", "urls": [ "https://bugzilla.redhat.com/CVE-2014-8122" ], "uuid": "f2c9fd91-5bdc-47a2-aa29-86f401c58bfc" } ] }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:redhat:jboss_weld:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "2.2.7", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_weld:3.0.0:alpha1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_weld:3.0.0:alpha2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2014-8122" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-362" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086", "refsource": "CONFIRM", "tags": [], "url": "https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086" }, { "name": "1031741", "refsource": "SECTRACK", "tags": [], "url": "http://www.securitytracker.com/id/1031741" }, { "name": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745", "refsource": "CONFIRM", "tags": [], "url": "https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745" }, { "name": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65", "refsource": "CONFIRM", "tags": [], "url": "https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65" }, { "name": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml", "refsource": "MISC", "tags": [], "url": "https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml" }, { "name": "RHSA-2015:0217", "refsource": "REDHAT", "tags": [ "Vendor Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0217.html" }, { "name": "RHSA-2015:0216", "refsource": "REDHAT", "tags": [ "Vendor Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0216.html" }, { "name": "RHSA-2015:0218", "refsource": "REDHAT", "tags": [ "Vendor Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0218.html" }, { "name": "RHSA-2015:0215", "refsource": "REDHAT", "tags": [ "Vendor Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0215.html" }, { "name": "RHSA-2015:0675", "refsource": "REDHAT", "tags": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html" }, { "name": "RHSA-2015:0773", "refsource": "REDHAT", "tags": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0773.html" }, { "name": "RHSA-2015:0851", "refsource": "REDHAT", "tags": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html" }, { "name": "RHSA-2015:0850", "refsource": "REDHAT", "tags": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html" }, { "name": "RHSA-2015:0920", "refsource": "REDHAT", "tags": [], "url": "http://rhn.redhat.com/errata/RHSA-2015-0920.html" }, { "name": "74252", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/74252" }, { "name": "redhat-jboss-cve20148122-info-disc(100892)", "refsource": "XF", "tags": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100892" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false } }, "lastModifiedDate": "2017-09-08T01:29Z", "publishedDate": "2015-02-13T15:59Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.