First published: Tue May 28 2024(Updated: )
Moderate: Red Hat JBoss EAP 7.4.14 XP 4.0.2.GA security release
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat JBoss Enterprise Application Platform |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2024:3385 is classified as moderate.
To fix RHSA-2024:3385, apply the asynchronous security update zip for JBoss EAP XP 4.0.2.
RHSA-2024:3385 affects Red Hat JBoss Enterprise Application Platform version 7.4.14 and XP 4.0.2.GA.
The vulnerability in RHSA-2024:3385 relates to cookie parsing in jetty-server that can exfiltrate values.
RHSA-2024:3385 was released as a security update for JBoss EAP on a specific date announced by Red Hat.