title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.3 security update
description: undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7.1