CVE-2015-3158
PicketLink does not properly check role based authorization
4.0 MediumFix available
CVE-2015-3158 is a medium vulnerability (CVSS 4.0) in Picketlink, published August 26, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.91%, the 80th percentile. Fixed in org.picketlink:picketlink-tomcat-common 2.7.1.Final.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.91%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.7.1.Finalorg.picketlink:picketlink-tomcat-common +237 more
Description
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.
Exploit likelihood
1.91%Up 0.6 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.picketlink:picketlink-tomcat-commonMaven | before 2.7.1.Final | 2.7.1.Final |
org.picketlink:picketlink-tomcat-commonMaven | before 2.7.1.Final, plus listed versions 2.1.0.Final2.1.1.Final2.1.10.Final2.1.2.Final2.1.3.Final Show 45 moreShow less2.1.4.Final2.1.5-2012Sep042.1.5.Final2.1.6.1.Final2.1.6.1.Final-12.1.6.2.Final2.1.6.3.Final2.1.6.Final2.1.7.Final2.1.8.Final2.1.9.Final2.1.9.SP12.1.9.SP22.1.9.SP32.5.0.CR12.5.0.CR22.5.0.Final2.5.1.Final2.5.2.Final2.5.3.Beta12.5.3.Beta22.5.3.Final2.5.3.SP12.5.3.SP102.5.3.SP112.5.3.SP122.5.3.SP132.5.3.SP142.5.3.SP22.5.3.SP32.5.3.SP42.5.3.SP52.5.3.SP72.5.3.SP82.5.3.SP92.5.4.Final2.5.4.SP102.5.4.SP112.5.4.SP132.5.4.SP152.5.4.SP162.5.4.SP172.5.4.SP182.5.4.SP22.5.4.SP4 | 2.7.1.Final |
glassfish-jsf-eap6Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:2.1.28-9.redhat_10.1.ep6.el5 | 0:2.1.28-9.redhat_10.1.ep6.el5 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el5 | 0:4.2.20-1.Final_redhat_1.1.ep6.el5 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el5 | 0:4.2.20-1.Final_redhat_1.1.ep6.el5 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el5 | 0:4.2.20-1.Final_redhat_1.1.ep6.el5 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el5 | 0:4.2.20-1.Final_redhat_1.1.ep6.el5 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el5 | 0:4.2.20-1.Final_redhat_1.1.ep6.el5 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:2.3.25-4.SP3_redhat_1.1.ep6.el5 | 0:2.3.25-4.SP3_redhat_1.1.ep6.el5 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
Show 228 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-consoleRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:2.5.6-2.Final_redhat_2.1.ep6.el5 | 0:2.5.6-2.Final_redhat_2.1.ep6.el5 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jboss-halRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:2.5.6-2.Final_redhat_2.1.ep6.el5 | 0:2.5.6-2.Final_redhat_2.1.ep6.el5 |
jboss-modulesRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:1.3.7-1.Final_redhat_1.1.ep6.el5 | 0:1.3.7-1.Final_redhat_1.1.ep6.el5 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-2.Final_redhat_2.1.ep6.el5 | 0:7.5.3-2.Final_redhat_2.1.ep6.el5 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el5 | 0:7.5.3-1.Final_redhat_2.1.ep6.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el5 | before 1:4.17.30-1.Final_redhat_1.1.ep6.el5 | 1:4.17.30-1.Final_redhat_1.1.ep6.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.5.10-1.Final_redhat_1.1.ep6.el5 | 0:7.5.10-1.Final_redhat_1.1.ep6.el5 |
picketlink-bindingsRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:2.5.4-8.SP7_redhat_1.1.ep6.el5 | 0:2.5.4-8.SP7_redhat_1.1.ep6.el5 |
picketlink-federationRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:2.5.4-8.SP7_redhat_1.1.ep6.el5 | 0:2.5.4-8.SP7_redhat_1.1.ep6.el5 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:2.3.12-1.Final_redhat_1.1.ep6.el5 | 0:2.3.12-1.Final_redhat_1.1.ep6.el5 |
glassfish-jsf-eap6Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:2.1.28-9.redhat_10.1.ep6.el6 | 0:2.1.28-9.redhat_10.1.ep6.el6 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el6 | 0:4.2.20-1.Final_redhat_1.1.ep6.el6 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el6 | 0:4.2.20-1.Final_redhat_1.1.ep6.el6 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el6 | 0:4.2.20-1.Final_redhat_1.1.ep6.el6 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el6 | 0:4.2.20-1.Final_redhat_1.1.ep6.el6 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el6 | 0:4.2.20-1.Final_redhat_1.1.ep6.el6 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:2.3.25-4.SP3_redhat_1.1.ep6.el6 | 0:2.3.25-4.SP3_redhat_1.1.ep6.el6 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-consoleRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:2.5.6-2.Final_redhat_2.1.ep6.el6 | 0:2.5.6-2.Final_redhat_2.1.ep6.el6 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jboss-halRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:2.5.6-2.Final_redhat_2.1.ep6.el6 | 0:2.5.6-2.Final_redhat_2.1.ep6.el6 |
jboss-modulesRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:1.3.7-1.Final_redhat_1.1.ep6.el6 | 0:1.3.7-1.Final_redhat_1.1.ep6.el6 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-2.Final_redhat_2.1.ep6.el6 | 0:7.5.3-2.Final_redhat_2.1.ep6.el6 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el6 | 0:7.5.3-1.Final_redhat_2.1.ep6.el6 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el6 | before 1:4.17.30-1.Final_redhat_1.1.ep6.el6 | 1:4.17.30-1.Final_redhat_1.1.ep6.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.10-1.Final_redhat_1.1.ep6.el6 | 0:7.5.10-1.Final_redhat_1.1.ep6.el6 |
picketlink-bindingsRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:2.5.4-8.SP7_redhat_1.1.ep6.el6 | 0:2.5.4-8.SP7_redhat_1.1.ep6.el6 |
picketlink-federationRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:2.5.4-8.SP7_redhat_1.1.ep6.el6 | 0:2.5.4-8.SP7_redhat_1.1.ep6.el6 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:2.3.12-1.Final_redhat_1.1.ep6.el6 | 0:2.3.12-1.Final_redhat_1.1.ep6.el6 |
glassfish-jsf-eap6Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:2.1.28-9.redhat_10.1.ep6.el7 | 0:2.1.28-9.redhat_10.1.ep6.el7 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el7 | 0:4.2.20-1.Final_redhat_1.1.ep6.el7 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el7 | 0:4.2.20-1.Final_redhat_1.1.ep6.el7 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el7 | 0:4.2.20-1.Final_redhat_1.1.ep6.el7 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el7 | 0:4.2.20-1.Final_redhat_1.1.ep6.el7 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:4.2.20-1.Final_redhat_1.1.ep6.el7 | 0:4.2.20-1.Final_redhat_1.1.ep6.el7 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:2.3.25-4.SP3_redhat_1.1.ep6.el7 | 0:2.3.25-4.SP3_redhat_1.1.ep6.el7 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-consoleRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:2.5.6-2.Final_redhat_2.1.ep6.el7 | 0:2.5.6-2.Final_redhat_2.1.ep6.el7 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jboss-halRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:2.5.6-2.Final_redhat_2.1.ep6.el7 | 0:2.5.6-2.Final_redhat_2.1.ep6.el7 |
jboss-modulesRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:1.3.7-1.Final_redhat_1.1.ep6.el7 | 0:1.3.7-1.Final_redhat_1.1.ep6.el7 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-2.Final_redhat_2.1.ep6.el7 | 0:7.5.3-2.Final_redhat_2.1.ep6.el7 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.3-1.Final_redhat_2.1.ep6.el7 | 0:7.5.3-1.Final_redhat_2.1.ep6.el7 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el7 | before 1:4.17.30-1.Final_redhat_1.1.ep6.el7 | 1:4.17.30-1.Final_redhat_1.1.ep6.el7 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:7.5.10-1.Final_redhat_1.1.ep6.el7 | 0:7.5.10-1.Final_redhat_1.1.ep6.el7 |
picketlink-bindingsRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:2.5.4-8.SP7_redhat_1.1.ep6.el7 | 0:2.5.4-8.SP7_redhat_1.1.ep6.el7 |
picketlink-federationRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:2.5.4-8.SP7_redhat_1.1.ep6.el7 | 0:2.5.4-8.SP7_redhat_1.1.ep6.el7 |
resteasyRed Hat:jboss_enterprise_application_platform:6::el7 | before 0:2.3.12-1.Final_redhat_1.1.ep6.el7 | 0:2.3.12-1.Final_redhat_1.1.ep6.el7 |
jboss-ec2-eapRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.ep6.el6 | 0:7.5.3-1.Final_redhat_2.ep6.el6 |
jboss-ec2-eap-samplesRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.5.3-1.Final_redhat_2.ep6.el6 | 0:7.5.3-1.Final_redhat_2.ep6.el6 |
What each source reports
NVD Score used
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.
- Record
CVE-2015-3158- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.
- Record
CVE-2015-3158- Updated
- 2026-11-02
EUVDEUVD-2022-3432No score
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.
- Record
EUVD-2022-3432- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9qhq-j4xm-cw48No score
PicketLink does not properly check role based authorization
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.7.1.Final does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.
- Record
GHSA-9qhq-j4xm-cw48- Updated
- 2026-11-02
OSVGHSA-9qhq-j4xm-cw48No score
PicketLink does not properly check role based authorization
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.7.1.Final does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.
- Record
GHSA-9qhq-j4xm-cw48- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2015-1671.html
github.com/picketlink/picketlink-bindings/pull/124
issues.jboss.org/browse/PLINK-708
Show 33 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1216123
nvd.nist.gov/vuln/detail/CVE-2015-3158
access.redhat.com/errata/RHSA-2015:1669
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1669.json
cve.org/CVERecord?id=CVE-2015-3158
This page doesn't list everything
Left out here: 39 versions. The JSON record has them.