RHSA-2018:3581: Critical: Red Hat JBoss BRMS 5.3.1 security update
Red Hat JBoss BRMS is a business rules management system for themanagement, storage, creation, modification, and deployment of JBoss Rules.This asynchronous patch is a security update for the RichFaces package in standalone versions of Red Hat JBoss BRMS 5.3.1.Security Fix(es): RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution (CVE-2018-14667) See https://access.redhat.com/solutions/3660371 for specific information regarding this flaw.For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.Red Hat would like to thank Joao Filho Matos Figueiredo for reporting this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2018:3581?
RHSA-2018:3581 is classified as a moderate severity security vulnerability.
How do I fix RHSA-2018:3581?
To fix RHSA-2018:3581, you need to apply the latest security updates for the RichFaces package in Red Hat JBoss BRMS 5.3.1.
What versions of Red Hat JBoss BRMS are affected by RHSA-2018:3581?
RHSA-2018:3581 affects standalone versions of Red Hat JBoss BRMS 5.3.1.
Is it necessary to update for RHSA-2018:3581?
Yes, it's necessary to update for RHSA-2018:3581 to mitigate security risks associated with the vulnerability.
What components are impacted by RHSA-2018:3581?
RHSA-2018:3581 impacts the RichFaces package within Red Hat JBoss BRMS.