Description (CNA)
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat, Inc. / resteasy | affected 3.0.7 through before 4.0.0Beta1 |
CWE
CWE-346
References
- https://access.redhat.com/errata/RHSA-2018:0479
- https://access.redhat.com/errata/RHSA-2018:0481
- http://www.securityfocus.com/bid/100465
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2018:0004
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0480
- https://access.redhat.com/errata/RHSA-2018:0005
- https://issues.jboss.org/browse/RESTEASY-1704
- https://access.redhat.com/errata/RHSA-2018:0478
ADP enrichment
No English description supplied.
- https://access.redhat.com/errata/RHSA-2018:0479
- https://access.redhat.com/errata/RHSA-2018:0481
- http://www.securityfocus.com/bid/100465
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2018:0004
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0480
- https://access.redhat.com/errata/RHSA-2018:0005
- https://issues.jboss.org/browse/RESTEASY-1704
- https://access.redhat.com/errata/RHSA-2018:0478