RHSA-2023:0164: Important: Red Hat JBoss Enterprise Application Platform 7.4 security update

Published Jan 12, 2023

Updated

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.Security Fix(es): CXF: Apache CXF: SSRF Vulnerability (CVE-2022-46364) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat JBoss Enterprise Application Platform

Remediation

Event History

Jan 12, 2023

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2023:0164?

The severity of RHSA-2023:0164 is classified as important.

How do I fix RHSA-2023:0164?

To fix RHSA-2023:0164, apply the asynchronous patch available for Red Hat JBoss Enterprise Application Platform 7.4.

What vulnerabilities are addressed in RHSA-2023:0164?

RHSA-2023:0164 addresses a Server-Side Request Forgery (SSRF) vulnerability in Apache CXF.

Which version of Red Hat JBoss is affected by RHSA-2023:0164?

RHSA-2023:0164 affects Red Hat JBoss Enterprise Application Platform version 7.4.

Is RHSA-2023:0164 applicable to all users of Red Hat JBoss?

RHSA-2023:0164 is applicable only to users utilizing Red Hat JBoss Enterprise Application Platform 7.4.