Back to bug 1390526
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Martin Prpič | 2016-11-01 10:18:20 UTC | Whiteboard | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=affected,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=affected,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected |
| Martin Prpič | 2016-11-01 10:18:48 UTC | CC | alee, ivan.afonichev, java-sig-commits, krzysztof.daniel, me, trick | |
| Horia Chiorean | 2016-11-01 10:18:51 UTC | CC | hchiorea | |
| Martin Prpič | 2016-11-01 10:21:35 UTC | Depends On | 1390531 | |
| Martin Prpič | 2016-11-01 10:21:43 UTC | Depends On | 1390532 | |
| Martin Prpič | 2016-11-01 10:21:56 UTC | Depends On | 1390533 | |
| Martin Prpič | 2016-11-01 10:23:29 UTC | Blocks | 1390534 | |
| Yasuhiro Ozone | 2016-11-01 22:41:21 UTC | CC | yozone | |
| Hung | 2016-11-07 14:40:58 UTC | CC | hpham | |
| Hooman Broujerdi | 2016-11-09 02:50:57 UTC | Whiteboard | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=affected,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected |
| Timothy Walsh | 2016-11-09 06:30:59 UTC | Depends On | 1393227 | |
| Timothy Walsh | 2016-11-09 06:31:12 UTC | Depends On | 1393228 | |
| Timothy Walsh | 2017-01-17 06:04:24 UTC | CC | hchiorea | |
| Whiteboard | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=affected,jbews-2/tomcat6=affected,jbews-3/tomcat7=affected,jbews-3/tomcat8=affected,fedora-all/tomcat=affected,epel-6/tomcat=affected | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected | ||
| Timothy Walsh | 2017-01-17 06:50:37 UTC | Blocks | 1376651 | |
| Timothy Walsh | 2017-03-02 07:32:28 UTC | Doc Text | The Realm implementations did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder. | |
| Timothy Walsh | 2017-03-02 11:22:38 UTC | Blocks | 1428325 | |
| Timothy Walsh | 2017-04-26 05:50:07 UTC | CC | psotirop | |
| Whiteboard | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected | ||
| Doran Moppert | 2017-07-21 05:18:19 UTC | Blocks | 1415638 | |
| PnT Account Manager | 2017-12-07 23:59:05 UTC | CC | felias | |
| PnT Account Manager | 2018-01-30 20:40:38 UTC | CC | hchiorea | |
| PnT Account Manager | 2018-05-10 18:19:00 UTC | CC | pavelp | |
| Patrick van Staveren | 2018-05-10 18:48:50 UTC | CC | trick | |
| Joshua Padman | 2019-05-16 03:44:55 UTC | Whiteboard | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=affected,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=affected,jdv-6/jbossweb=affected,jon-3/jbossweb=affected,fsw-6/jbossweb=affected,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=wontfix,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=wontfix,jdv-6/jbossweb=wontfix,jon-3/jbossweb=wontfix,fsw-6/jbossweb=wontfix,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected |
| Lukáš Petrovický | 2019-09-24 14:08:37 UTC | CC | lpetrovi | |
| Product Security DevOps Team | 2019-09-29 13:59:56 UTC | Whiteboard | impact=low,public=20161027,reported=20161027,source=internet,cvss2=2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N,cvss3=3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N,brms-5/jbossweb=wontfix,eap-5/jbossweb=notaffected,eap-6/jbossweb=notaffected,jdg-6/jbossweb=wontfix,jdv-6/jbossweb=wontfix,jon-3/jbossweb=wontfix,fsw-6/jbossweb=wontfix,fuse-6/jbossweb=wontfix,openshift-1/jbossweb=affected,rhel-5/tomcat5=wontfix,rhel-6/tomcat6=wontfix,rhel-7/tomcat=wontfix,jbews-2/tomcat7=wontfix,jbews-2/tomcat6=wontfix,jbews-3/tomcat7=defer,jbews-3/tomcat8=defer,fedora-all/tomcat=affected,epel-6/tomcat=affected,jws-3/tomcat7=affected,jws-3/tomcat8=affected | |
| PnT Account Manager | 2019-11-05 01:07:18 UTC | CC | psakar | |
| PnT Account Manager | 2020-01-16 22:28:48 UTC | CC | hpham | |
| PnT Account Manager | 2020-10-16 22:25:20 UTC | CC | pgier | |
| PnT Account Manager | 2020-10-20 21:09:31 UTC | CC | vhalbert | |
| PnT Account Manager | 2020-11-12 22:20:00 UTC | CC | miburman | |
| Red Hat Bugzilla | 2021-09-01 04:30:08 UTC | CC | spinder | |
| Red Hat Bugzilla | 2021-10-15 11:51:42 UTC | CC | kconner | |
| Joshua Padman | 2021-10-27 10:53:04 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2021-10-27 10:53:04 UTC |
Back to bug 1390526