Bharti Kundal

**Name of the Vulnerable Software and Affected Versions** JBoss Enterprise Application Platform versions prior to 7.1.0 **Description** The issue arises from improper default permissions on the /tmp/auth directory, allowing any local user to connect to the CLI and execute arbitrary operations. **Recommendations** For versions prior to 7.1.0, update to version 7.1.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** JBoss Enterprise Application Platform versions prior to 7.0.4 **Description** An information disclosure issue was discovered in the configuration of RBAC, where users with a Monitor role can view sensitive information marked as such. **Recommendations** For versions prior to 7.0.4, update to version 7.0.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Red Hat Enterprise Linux versions prior to 7 **Description** A security issue was found in certain versions of Red Hat Enterprise Linux, where EAP packages have incorrect permissions for the /etc/sysconfig/jbossas configuration file. The file is writable to the jboss group and its content is executed with root privileges when the jboss service is started, stopped, or restarted on systems using classic /etc/init.d init scripts, such as Red Hat Enterprise Linux 6 and earlier. **Recommendations** For Red Hat Enterprise Linux versions prior to 7, consider restricting write access to the /etc/sysconfig/jbossas configuration file to prevent unauthorized modifications. As a temporary workaround, monitor the file for any changes and ensure that only authorized personnel can modify it. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Undertow versions prior to 1.4.17 Undertow versions prior to 1.3.31 Undertow versions prior to 2.0.0 **Description** It was discovered that Undertow processes HTTP request headers with unusual whitespaces, which can cause possible HTTP request smuggling. **Recommendations** For versions prior to 1.4.17, update to version 1.4.17 or later. For versions prior to 1.3.31, update to version 1.3.31 or later. For versions prior to 2.0.0, update to version 2.0.0 or later.

**Name of the Vulnerable Software and Affected Versions** Jboss jbossas versions prior to 5.2.0-23 Jboss jbossas versions prior to 6.4.13 Jboss jbossas versions prior to 7.0.5 **Description** The issue is related to unsafe file handling in the jboss init script, which could result in local privilege escalation. **Recommendations** For versions prior to 5.2.0-23, update to version 5.2.0-23 or later. For versions prior to 6.4.13, update to version 6.4.13 or later. For versions prior to 7.0.5, update to version 7.0.5 or later.

**Name of the Vulnerable Software and Affected Versions** admin-cli versions prior to 3.0.0.alpha25 admin-cli version 2.2.1.cr2 **Description** The issue allows an EAP feature to download server log files, making them available via GET requests. This makes the logs vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files, consuming enough resources that normal server functioning could be impaired. **Recommendations** For versions prior to 3.0.0.alpha25, update to version 3.0.0.alpha25 or later. For version 2.2.1.cr2, consider disabling the EAP feature that allows downloading server log files until a patch is available. Restrict access to server log files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** HornetQ versions prior to 2.4.0 Artemis versions prior to 2.4.0 **Description** The issue occurs when Artemis and HornetQ are configured with UDP discovery and JGroups discovery, and an unexpected multicast message is received, resulting in the creation of a huge byte array. This may lead to heap memory exhaustion, full GC, or OutOfMemoryError. **Recommendations** For HornetQ versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue. For Artemis versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Jboss EAP version 7.1.0.GA Description: The AJP connector in undertow does not use the ALLOW ENCODED SLASH option, allowing slash and anti-slash characters to be encoded in the URL. This could lead to path traversal, resulting in the disclosure of arbitrary local files. Recommendations: For Jboss EAP version 7.1.0.GA, consider disabling the AJP connector until a patch is available to prevent path traversal attacks. Restrict access to sensitive local files to minimize the risk of information disclosure.

**Name of the Vulnerable Software and Affected Versions** libxml2 (affected versions not specified) **Description** The issue allows context-dependent attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted XML document. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libxml2 (affected versions not specified) **Description** The issue allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. This problem exists due to an incorrect fix for a previous issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Red Hat JBoss Core Services (affected versions not specified) **Description** A regression issue was discovered in libxml2, which makes it vulnerable to a Denial of Service (DoS) attack due to a stack overflow. This issue is related to a previous problem. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.