CVE-2024-3884: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 (exact versions not specified); +31 more affected…

Affected technology

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4.24 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.0 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.1.3 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 · Exact affected versions not specified by the source
Red Hat

OpenShift Serverless · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel 4 for Quarkus 3 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel for Spring Boot 3 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel for Spring Boot 4 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel - HawtIO 4 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apicurio Registry 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Build of Keycloak · Exact affected versions not specified by the source
Red Hat

Red Hat build of OptaPlanner 8 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Quarkus · Exact affected versions not specified by the source
Red Hat

Red Hat Data Grid 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Fuse 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Integration Camel K 1 · Exact affected versions not specified by the source
Red Hat

Red Hat Integration Camel Quarkus 2 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Data Grid 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform Expansion Pack · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Fuse Service Works 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Process Automation 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Single Sign-On 7 · Exact affected versions not specified by the source
Red Hat

streams for Apache Kafka · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.