CVE Vulnerabilities

CVE-2024-51127

Published: Nov 04, 2024 | Modified: Nov 21, 2024
CVSS 3.x
7.1
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
7.1 IMPORTANT
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Ubuntu

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.

Affected Software

Name Vendor Start Version End Version
Hornetq Redhat * 2.4.9 (including)
Red Hat JBoss Enterprise Application Platform 7 RedHat *
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 RedHat eap7-hornetq-0:2.4.11-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 RedHat eap7-hornetq-0:2.4.11-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 RedHat eap7-hornetq-0:2.4.11-1.Final_redhat_00001.1.el7eap *
Red Hat JBoss Enterprise Application Platform 8 RedHat org.hornetq/hornetq-core-client *
Red Hat JBoss Enterprise Application Platform 8 RedHat org.jboss.eap-jboss-eap *
Red Hat JBoss Enterprise Application Platform 8 RedHat org.hornetq/hornetq-core-client *
Red Hat JBoss Enterprise Application Platform 8 RedHat org.jboss.eap-jboss-eap *
Red Hat JBoss Enterprise Application Platform 8 RedHat org.jboss.ws.cxf-jbossws-cxf *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-activemq-artemis-0:2.33.0-2.redhat_00016.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-angus-activation-0:2.0.2-1.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-apache-commons-lang-0:3.14.0-3.redhat_00007.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-atinject-0:2.0.1-3.redhat_00006.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-azure-storage-0:8.6.6-4.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-commons-logging-jboss-logging-0:1.0.0-2.Final_redhat_1.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-eap-product-conf-parent-0:800.5.0-1.GA_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-ecj-1:3.31.0-2.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-expressly-0:5.0.0-5.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-hal-console-0:3.6.20-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-hibernate-0:6.2.32-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-hornetq-0:2.4.10-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jakarta-activation-0:2.1.3-1.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jakarta-xml-bind-api-0:4.0.2-1.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jansi-0:1.18.0-2.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-javaee-security-soteria-0:3.0.0-3.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jboss-ejb-client-0:5.0.8-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jboss-marshalling-0:2.1.6-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jboss-remoting-0:5.0.30-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jboss-weld-api-0:5.0.0-4.SP3_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jbossws-cxf-0:7.3.0-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jctools-0:4.0.5-1.redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jsonb-spec-0:3.0.1-1.redhat_00002.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-narayana-0:6.0.4-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-netty-0:4.1.114-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-netty-transport-native-epoll-0:4.1.114-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-parsson-0:1.1.7-1.redhat_00002.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-resteasy-0:6.2.11-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-undertow-0:2.3.18-1.SP1_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-undertow-jastow-0:2.2.8-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-vdx-0:1.1.6-3.redhat_1.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-wildfly-0:8.0.5-3.GA_redhat_00002.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-wildfly-elytron-0:2.2.7-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-wildfly-elytron-ee-0:3.0.3-2.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-yasson-0:3.0.4-1.redhat_00002.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-eap-product-conf-parent-0:800.5.1-1.GA_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-hornetq-0:2.4.11-1.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-jgroups-1:5.2.23-2.Final_redhat_00001.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 RedHat eap8-wildfly-0:8.0.5-5.GA_redhat_00004.1.el8eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-activemq-artemis-0:2.33.0-2.redhat_00016.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-angus-activation-0:2.0.2-1.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-apache-commons-lang-0:3.14.0-3.redhat_00007.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-atinject-0:2.0.1-3.redhat_00006.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-azure-storage-0:8.6.6-4.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-commons-logging-jboss-logging-0:1.0.0-2.Final_redhat_1.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-eap-product-conf-parent-0:800.5.0-1.GA_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-ecj-1:3.31.0-2.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-expressly-0:5.0.0-5.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-hal-console-0:3.6.20-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-hibernate-0:6.2.32-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-hornetq-0:2.4.10-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jakarta-activation-0:2.1.3-1.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jakarta-xml-bind-api-0:4.0.2-1.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jansi-0:1.18.0-2.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-javaee-security-soteria-0:3.0.0-3.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jboss-ejb-client-0:5.0.8-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jboss-marshalling-0:2.1.6-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jboss-remoting-0:5.0.30-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jboss-weld-api-0:5.0.0-4.SP3_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jbossws-cxf-0:7.3.0-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jctools-0:4.0.5-1.redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jsonb-spec-0:3.0.1-1.redhat_00002.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-narayana-0:6.0.4-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-netty-0:4.1.114-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-netty-transport-native-epoll-0:4.1.114-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-parsson-0:1.1.7-1.redhat_00002.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-resteasy-0:6.2.11-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-undertow-0:2.3.18-1.SP1_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-undertow-jastow-0:2.2.8-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-vdx-0:1.1.6-3.redhat_1.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-wildfly-0:8.0.5-3.GA_redhat_00002.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-wildfly-elytron-0:2.2.7-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-wildfly-elytron-ee-0:3.0.3-2.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-yasson-0:3.0.4-1.redhat_00002.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-eap-product-conf-parent-0:800.5.1-1.GA_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-hornetq-0:2.4.11-1.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-jgroups-1:5.2.23-2.Final_redhat_00001.1.el9eap *
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 RedHat eap8-wildfly-0:8.0.5-5.GA_redhat_00004.1.el9eap *

References