RHSA-2020:2062: Important: Red Hat JBoss Enterprise Application Platform 7.2 security update
Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.This asynchronous patch is a security update for the Infinispan package in Red Hat JBoss Enterprise Application Platform 7.2.Security Fix(es): infinispan-core: infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods (CVE-2019-10174) jsf-impl: mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter (CVE-2018-14371) For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2062?
The severity of RHSA-2020:2062 is classified as important.
How do I fix RHSA-2020:2062?
To fix RHSA-2020:2062, you need to apply the available security update for the Infinispan package in Red Hat JBoss Enterprise Application Platform 7.2.
What versions of JBoss are affected by RHSA-2020:2062?
RHSA-2020:2062 affects Red Hat JBoss Enterprise Application Platform 7.2.
Is there a workaround for RHSA-2020:2062?
No specific workaround is provided for RHSA-2020:2062; applying the security patch is recommended.
What is the main issue addressed in RHSA-2020:2062?
RHSA-2020:2062 addresses security vulnerabilities found in the Infinispan package.