Resolve Birthday attack in JBoss AS 7.1.1

madhuraoak12 Dec 18, 2017 6:12 AM

Hi,

Birthday attack is reported in JBOSS AS 7.1.1 version. We are using non licensed version. Please let me know whether we should use licensed copy of JBOSS EAP 6.4 or later version of JBoss to remove this vulnerability.

Madhura

1. Re: Resolve Birthday attack in JBoss AS 7.1.1

jaikiran Dec 19, 2017 2:59 AM (in response to madhuraoak12)

Which specific CVE are you interested in? JBoss EAP does indeed provide security fixes (as patches) as and when relevant. Those changes do get pushed to upstream projects like WildFly too. So you either have to upgrade to a WildFly community version which has that fix or use JBoss EAP Red Hat JBoss Enterprise Application Platform (JBoss EAP) and the support team should be able to provide you access to those patches.

P.S: If you are talking about this CVE CVE-2016-2183 - Red Hat Customer Portal then it's patched in the JBoss EAP Red Hat Customer Portal
Actions