High

Eap: wildfly-elytron has a ssrf security issue

Type: advisorySource: Official CVE List1 source record

A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior is performed on the destination URL address, which may result in a server-side request forgery (SSRF) vulnerability.

Announced 9 Apr 2024Group revision 1

Original source ↗

CVE-2024-1233

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-1233

Red Hat JBoss Enterprise Application Platform

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/17/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/18/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/19/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/20/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/21/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/22/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/23/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/24/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/25/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/26/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/27/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/28/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/29/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/30/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/31/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/32/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/33/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/34/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/35/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/36/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/37/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/38/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/39/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/40/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/41/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/42/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/43/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/44/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/45/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/46/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/47/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/48/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/49/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/50/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/51/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/52/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/53/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/54/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/55/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/56/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Source reference: /containers/cna/affected/57/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 8

Source reference: /containers/cna/affected/58/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/59/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/60/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/61/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/62/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat JBoss Enterprise Application Platform Expansion Pack

Source reference: /containers/cna/affected/63/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "32.0.0.Final",
        "versionType": "maven"
      }
    ],
    "packageName": "wildfly",
    "collectionURL": "https://github.com/wildfly/wildfly",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.15.23.Final-redhat-00001",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "org.wildfly.security/wildfly-elytron",
    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.0.1-4.b08_redhat_00005.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-glassfish-el",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:5.1.17-3.Final_redhat_00004.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-hibernate",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jackson-databind",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.0.12-1.Final_redhat_00002.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-ejb-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.1.63-2.Final_redhat_00003.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-netty",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.4.18-16.SP14_redhat_00001.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-undertow",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:7.1.11-4.GA_redhat_00002.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.1.14-1.Final_redhat_00001.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-elytron",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.0.21-1.Final_redhat_00001.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-http-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.0.13-1.Final_redhat_00001.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-naming-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.0.12-1.Final_redhat_00001.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-openssl",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.0.12-6.Final_redhat_00001.1.ep7.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-openssl-linux",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.10.4-3.redhat_00006.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jackson-annotations",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.10.4-3.redhat_00006.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jackson-core",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.10.4-5.redhat_00006.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jackson-databind",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.10.4-3.redhat_00006.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jackson-jaxrs-providers",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.10.4-5.redhat_00006.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jackson-modules-base",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.10.4-2.redhat_00006.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jackson-modules-java8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.7.2-16.Final_redhat_00017.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-server-migration",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.1.63-5.Final_redhat_00003.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-netty",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.0.41-4.SP5_redhat_00001.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-undertow",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:7.3.14-3.GA_redhat_00002.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.10.17-1.Final_redhat_00001.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-elytron",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.5.8-1.redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-apache-cxf",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.3.22-1.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-hal-console",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:11.0.19-2.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-infinispan",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.0.54-3.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-ejb-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.0.0-8.SP08_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-jsf-api_2.3_spec",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:13.5.0-1.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-metadata",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.12.3-3.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-modules",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.10.0-36.Final_redhat_00035.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-server-migration",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.2.32-1.SP1_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-undertow",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:7.4.17-2.GA_redhat_00002.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.2.4-1.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-discovery",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.15.23-2.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-elytron",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.1.17-1.Final_redhat_00002.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-http-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.1.19-1.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-transaction-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.4.3-1.redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wss4j",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.3.4-1.redhat_00002.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-xml-security",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.5.8-1.redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-apache-cxf",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.3.22-1.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-hal-console",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:11.0.19-2.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-infinispan",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.0.54-3.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-ejb-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.0.0-8.SP08_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-jsf-api_2.3_spec",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:13.5.0-1.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-metadata",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.12.3-3.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-modules",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.10.0-36.Final_redhat_00035.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-jboss-server-migration",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.2.32-1.SP1_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-undertow",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:7.4.17-2.GA_redhat_00002.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.2.4-1.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-discovery",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.15.23-2.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-elytron",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.1.17-1.Final_redhat_00002.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-http-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.1.19-1.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-transaction-client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.4.3-1.redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wss4j",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.3.4-1.redhat_00002.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-xml-security",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.15.23-2.Final_redhat_00001.1.el7eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap7-wildfly-elytron",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:8.0"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 8",
    "packageName": "eap",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.0.1-1.Final_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap8-elytron-web",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.2.4-2.SP01_redhat_00001.1.el8eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap8-wildfly-elytron",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.0.1-1.Final_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap8-elytron-web",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.2.4-2.SP01_redhat_00001.1.el9eap",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "eap8-wildfly-elytron",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:jbosseapxp"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
    "packageName": "wildfly",
    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
    "defaultStatus": "affected"
  }
]

Related CVEs: CVE-2024-1233
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #4976 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 22:01:02 GMT
Publisher date: Tue, 09 Apr 2024 07:01:47 GMT

Read the original announcement

Revision history

24 Oct 2026CVE-2024-1233 · Revision 1Source updated