The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2048 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime.

    This release of Red Hat JBoss Enterprise Application Platform 7.3.7 serves as a replacement for Red Hat     JBoss Enterprise Application Platform 7.3.6, and includes bug fixes and enhancements. See the Red Hat     JBoss Enterprise Application Platform 7.3.7 Release Notes for information about the most significant bug     fixes and enhancements included in this release.

    Security Fix(es):

    * velocity: arbitrary code execution when attacker is able to modify templates (CVE-2020-13936)

    * netty: Information disclosure via the local system temporary directory (CVE-2021-21290)

    * netty: possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5498 advisory.

    Red Hat Satellite is a systems management tool for Linux-based     infrastructure. It allows for provisioning, remote management, and     monitoring of multiple Linux deployments with a single centralized tool.

    Security Fix(es):

    * libsolv: Heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200)
    * satellite: foreman: Authenticate remote code execution through Sendmail configuration (CVE-2021-3584)
    * candlepin: Allow unintended SCA certificate to authenticate Candlepin (CVE-2021-4142)
    * candlepin: netty: Information disclosure via the local system temporary directory (CVE-2021-21290)
    * candlepin: netty: Possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)
    * candlepin: netty: Request smuggling via content-length header (CVE-2021-21409)
    * tfm-rubygem-sidekiq: XSS via the queue name of the live-poll feature (CVE-2021-30151)
    * python-sqlparse: ReDoS via regular expression in StripComments filter (CVE-2021-32839)
    * libsolv: various flaws (CVE-2021-33928 CVE-2021-33929 CVE-2021-33930 CVE-2021-33938)
    * tfm-rubygem-puma: Inconsistent Interpretation of HTTP Requests in puma (CVE-2021-41136)
    * logback-classic: Remote code execution through JNDI call from within its configuration file     (CVE-2021-42550)
    * candlepin: netty: Control chars in header names may lead to HTTP request smuggling (CVE-2021-43797)
    * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)
    * python3-django: Potential bypass of an upstream access control based on URL paths (CVE-2021-44420)
    * libsolv: Heap overflow (CVE-2021-44568)
    * python3-django: Various flaws (CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 CVE-2022-22818)
    * tfm-rubygem-actionpack: Information leak between requests (CVE-2022-23633)
    * tfm-rubygem-puma: rubygem-rails: Information leak between requests (CVE-2022-23634)
    * python3-django: Denial-of-service possibility in file uploads (CVE-2022-23833)
    * tfm-rubygem-sidekiq: WebUI Denial of Service caused by number of days on graph (CVE-2022-23837)
    * python3-django: Various flaws (CVE-2022-28346 CVE-2022-28347)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

    Additional Changes:

    * New repo layout for Satellite, Utils, Maintenance, and Client repos.
    * Support for RHEL 9 clients
    * Module-based installation on RHEL 8
    * Upgrading Satellite Server and Capsule Server installations from RHEL 7 to RHEL 8
    * Connected and Disconnected servers supported on RHEL 7 and RHEL 8
    * Inter-Server Synchronization improvements
    * Puppet integration optional and disabled by default
    * Pulp 3 updated to Python 3.8
    * Change to Capsule certificate archive
    * New default port for communication with Red Hat Subscription Management * (RHSM) API on Capsule servers
    * New Content Views Page (Content Publication workflow simplification)
    * New Hosts Page (Technology Preview)
    * Registration and preview templates
    * Simplified host content source changing
    * Improved behavior for configuring and running remote jobs
    * Provisioning improvements
    * New error signaling unsupported options in TASK-Filter
    * Virt-who configuration enhanced to support Nutanix AHV
    * Cloud Connector configuration updated
    * Improved Insights adoption

    The items above are not a complete list of changes. This update also fixes     several bugs and adds various enhancements. Documentation for these changes     is available from the Release Notes document linked to in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6049-1 advisory.

    It was discovered that Netty's Zlib decoders did not limit memory allocations. A remote attacker could     possibly use this issue to cause Netty to exhaust memory via malicious input, leading to a denial of     service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-11612)

    It was discovered that Netty created temporary files with excessive permissions. A local attacker could     possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 ESM, Ubuntu     18.04 ESM, and Ubuntu 20.04 ESM. (CVE-2021-21290)

    It was discovered that Netty did not properly validate content-length headers. A remote attacker could     possibly use this issue to smuggle requests. This issue was only fixed in Ubuntu 20.04 ESM.
    (CVE-2021-21295, CVE-2021-21409)

    It was discovered that Netty's Bzip2 decompression decoder did not limit the decompressed output data     size. A remote attacker could possibly use this issue to cause Netty to exhaust memory via malicious     input, leading to a denial of service. This issue only affected Ubuntu 18.04 ESM, Ubuntu 20.04 ESM, Ubuntu     22.04 LTS, and Ubuntu 22.10. (CVE-2021-37136)

    It was discovered that Netty's Snappy frame decoder function did not limit chunk lengths. A remote     attacker could possibly use this issue to cause Netty to exhaust memory via malicious input, leading to a     denial of service. (CVE-2021-37137)

    It was discovered that Netty did not properly handle control chars at the beginning and end of header     names. A remote attacker could possibly use this issue to smuggle requests. This issue only affected     Ubuntu 18.04 ESM, Ubuntu 20.04 ESM, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2021-43797)

    It was discovered that Netty could be made into an infinite recursion when parsing a malformed crafted     message. A remote attacker could possibly use this issue to cause Netty to crash, leading to a denial of     service. This issue only affected Ubuntu 20.04 ESM, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-41881)

    It was discovered that Netty did not validate header values under certain circumstances. A remote attacker     could possibly use this issue to perform HTTP response splitting via malicious header values. This issue     only affected Ubuntu 18.04 ESM, Ubuntu 20.04 ESM, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-41915)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017767 advisory.

    Netty is an open-source, asynchronous event-driven network application framework for rapid development of     maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a     vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are     used local information disclosure can occur via the local system temporary directory if temporary storing     uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user.
    As such, writing to this directory using APIs that do not explicitly set the file/directory permissions     can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The     method File.createTempFile on unix-like systems creates a random file, but, by default will create this     file with the permissions -rw-r--r--. Thus, if sensitive information is written to this file, other     local users can read this information. This is the case in netty's AbstractDiskHttpData is vulnerable.
    This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own java.io.tmpdir     when you start the JVM or use DefaultHttpDataFactory.setBaseDir(...) to set the directory to something     that is only readable by the current user.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1511 advisory.

    Red Hat AMQ Clients enable connecting, sending, and receiving messages over the AMQP 1.0 wire transport     protocol to or from AMQ Broker 6 and 7.

    This update provides various bug fixes and enhancements in addition to the client package versions     previously released on Red Hat Enterprise Linux 7 and 8.

    Security Fix(es):

    * netty: Information disclosure via the local system temporary directory (CVE-2021-21290)

    * netty: possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)

    * netty: Request smuggling via content-length header (CVE-2021-21409)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2047 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime.

    This release of Red Hat JBoss Enterprise Application Platform 7.3.7 serves as a replacement for Red Hat     JBoss Enterprise Application Platform 7.3.6, and includes bug fixes and enhancements. See the Red Hat     JBoss Enterprise Application Platform 7.3.7 Release Notes for information about the most significant bug     fixes and enhancements included in this release.

    Security Fix(es):

    * velocity: arbitrary code execution when attacker is able to modify templates (CVE-2020-13936)

    * netty: Information disclosure via the local system temporary directory (CVE-2021-21290)

    * netty: possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0190 advisory.

    Red Hat Satellite is a system management solution that allows organizations to configure and maintain     their systems without the necessity to provide public Internet access to their servers or other client     systems. It performs provisioning and configuration management of predefined standard operating     environments.

    Security Fix(es):

    1927028 - candlepin: netty: Information disclosure via the local system temporary directory     (CVE-2021-21290)

    This update fixes the following bugs:

    2016047 - Uploading a duplicate file fails with undefined local variable or method upload_href for     #<Actions::Pulp3::Repository::CommitUpload:0x00000000134e3f00>     2027347 - Satellite 6.10 upgrade fails with PG::NotNullViolation: ERROR: column subscription_id contains     null values     2027354 - Using Satellite with a proxy produces an SELinux alert     2027358 - Large CRL file operation causes OOM error in Candlepin     2027817 - [BUG] Upgrading Satellite 6.9 with custom certificates to Satellite 6.10 beta will cause the     same problem to occur as BZ# 1961886     2030445 - Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass     2030448 - Capsule sync task failed to refresh repo that doesn't have feed url with bad argument (expected     URI object or URI string) error

    Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The 17.12.11, 18.8.11, 19.12.10, and 20.12.0 versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2021 CPU advisory.

  - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: Admin     (Nimbus JOSE+JWT)). Supported versions that are affected are 18.8.0-18.8.11. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera     Gateway. Successful attacks of this vulnerability can result in takeover of Primavera Gateway.
    (CVE-2019-17195)

  - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: Admin     (Lodash)). Supported versions that are affected are 17.12.0-17.12.11, 18.8.0-18.8.11, 19.12.0-19.12.10 and     20.12.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Primavera Gateway. Successful attacks of this vulnerability can result in unauthorized     creation, deletion or modification access to critical data or all Primavera Gateway accessible data and     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Primavera Gateway.
    (CVE-2020-8203)

  - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: Admin     (Netty)). Supported versions that are affected are 17.12.0-17.12.11, 18.8.0-18.8.11 and 19.12.0-19.12.10.
    Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Primavera Gateway. Successful attacks of this vulnerability can result in unauthorized     creation, deletion or modification access to critical data or all Primavera Gateway accessible data.
    (CVE-2021-21409)     
  - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component:
    jackson-databind). (CVE-2020-36189)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2046 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime.

    This release of Red Hat JBoss Enterprise Application Platform 7.3.7 serves as a replacement for Red Hat     JBoss Enterprise Application Platform 7.3.6, and includes bug fixes and enhancements. See the Red Hat     JBoss Enterprise Application Platform 7.3.7 Release Notes for information about the most significant bug     fixes and enhancements included in this release.

    Security Fix(es):

    * velocity: arbitrary code execution when attacker is able to modify templates (CVE-2020-13936)

    * netty: Information disclosure via the local system temporary directory (CVE-2021-21290)

    * netty: possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2022_5498 advisory.

    * libsolv: Heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200)
    * satellite: foreman: Authenticate remote code execution through Sendmail configuration (CVE-2021-3584)
    * candlepin: Allow unintended SCA certificate to authenticate Candlepin (CVE-2021-4142)
    * candlepin: netty: Information disclosure via the local system temporary directory (CVE-2021-21290)
    * candlepin: netty: Possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)
    * candlepin: netty: Request smuggling via content-length header (CVE-2021-21409)
    * tfm-rubygem-sidekiq: XSS via the queue name of the live-poll feature (CVE-2021-30151)
    * python-sqlparse: ReDoS via regular expression in StripComments filter (CVE-2021-32839)
    * libsolv: various flaws (CVE-2021-33928 CVE-2021-33929 CVE-2021-33930 CVE-2021-33938)
    * tfm-rubygem-puma: Inconsistent Interpretation of HTTP Requests in puma (CVE-2021-41136)
    * logback-classic: Remote code execution through JNDI call from within its configuration file     (CVE-2021-42550)
    * candlepin: netty: Control chars in header names may lead to HTTP request smuggling (CVE-2021-43797)
    * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)
    * python3-django: Potential bypass of an upstream access control based on URL paths (CVE-2021-44420)
    * libsolv: Heap overflow (CVE-2021-44568)
    * python3-django: Various flaws (CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 CVE-2022-22818)
    * tfm-rubygem-actionpack: Information leak between requests (CVE-2022-23633)
    * tfm-rubygem-puma: rubygem-rails: Information leak between requests (CVE-2022-23634)
    * python3-django: Denial-of-service possibility in file uploads (CVE-2022-23833)
    * tfm-rubygem-sidekiq: WebUI Denial of Service caused by number of days on graph (CVE-2022-23837)
    * python3-django: Various flaws (CVE-2022-28346 CVE-2022-28347)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1271-1 advisory.

    - Updated to version 4.1.75:
      - CVE-2021-37136: Fixed an unrestricted decompressed data size in Bzip2Decoder         (bsc#1190610).
      - CVE-2021-37137: Fixed an unrestricted chunk length in SnappyFrameDecoder,         which might lead to excessive memory usage (#bsc#1190613).
      - CVE-2021-43797: Fixed a potential HTTP request smuggling issue due to         insufficient validation against control characters (bsc#1193672).
      - CVE-2021-21290: Fixed an information disclosure via the local system         temporary directory (bsc#1182103).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
149811	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.3.7 security update on RHEL 8 (Moderate) (RHSA-2021:2048)	Nessus	Red Hat Local Security Checks	2021/5/20	2024/11/7	high
194275	RHEL 7 / 8 : Satellite 6.11 Release (Moderate) (RHSA-2022:5498)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/8	critical
174932	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 LTS : Netty vulnerabilities (USN-6049-1)	Nessus	Ubuntu Local Security Checks	2023/4/28	2025/9/3	medium
314067	Unity Linux 20.1070e Security Update: netty (UTSA-2026-017767)	Nessus	Unity Linux Local Security Checks	2026/5/11	2026/5/11	medium
149319	RHEL 7 / 8 : AMQ Clients 2.9.1 (RHSA-2021:1511)	Nessus	Red Hat Local Security Checks	2021/5/6	2024/11/7	medium
149841	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.7 security update on RHEL 7 (Moderate) (RHSA-2021:2047)	Nessus	Red Hat Local Security Checks	2021/5/21	2024/11/7	high
156909	RHEL 7 : Satellite 6.10.2 Async Bug Fix Update (Moderate) (RHSA-2022:0190)	Nessus	Red Hat Local Security Checks	2022/1/20	2024/11/7	medium
151974	Oracle Primavera Gateway (Jul 2021 CPU)	Nessus	CGI abuses	2021/7/22	2023/12/7	critical
149813	RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.3.7 security update on RHEL 6 (Moderate) (RHSA-2021:2046)	Nessus	Red Hat Local Security Checks	2021/5/20	2024/11/7	high
357728	Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_5498)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
170223	openSUSE 15 Security Update : netty (SUSE-SU-2022:1271-1)	Nessus	SuSE Local Security Checks	2023/1/20	2026/6/26	medium

偵測

搜尋 Plugin

high

critical

medium

medium

medium

high

medium

critical

high

critical

medium