redhat business-central vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an malicious user to gain admin privileges in the Business Central Console.

Redhat Decision Manager 7.0 Redhat Process Automation 7.0

8.2

CVSSv3

XML external entity injection(XXE) is a vulnerability that allows an malicious user to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The s...

Redhat Process Automation Manager

7.5

CVSSv3

It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp suite etc.

Redhat Business-central Redhat Descision Manager 7.0 Redhat Process Automation 7.0

6.5

CVSSv3

A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lea...

Redhat Decision Manager 7.5.1 Redhat Process Automation Manager 7.5.1

5.4

CVSSv3

JBoss BRMS 6 and BPM Suite 6 prior to 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in...

Redhat Jboss Bpm Suite

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook