redhat jboss enterprise application platform 5.2.0 vulnerabilities and exploits

(subscribe to this query)

The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) prior to 5.2.0, Web Platform (EWP) prior to 5.2.0, BRMS Platform prior to 5.3.1, and SOA Platform prior to 5.3.1 allows remote malicious users to gain privileges of the previous user via a null password,...

Redhat Jboss Enterprise Web Platform 5.2.0 Redhat Jboss Enterprise Application Platform 5.2.0 Redhat Jboss Enterprise Brms Platform

The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by read...

Redhat Jboss Enterprise Application Platform 5.2.0 Redhat Jboss Enterprise Application Platform 5.1.2 Redhat Jboss Enterprise Web Platform 5.1.2 Redhat Jboss Enterprise Web Platform 5.2.0

The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) prior to 5.2.0, Web Platform (EWP) prior to 5.2.0, BRMS Platform prior to 5.3.1, and SOA Platform prior to 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intend...

Redhat Jboss Enterprise Application Platform 5.2.0 Redhat Jboss Enterprise Web Platform 5.2.0 Redhat Jboss Enterprise Brms Platform

The processInvocation function in org.jboss.as.ejb3.security.AuthorizationInterceptor in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) prior to 6.0.1, authorizes all requests when no roles are allowed for an Enterprise Java Beans (EJB) method invocation, which al...

Redhat Jboss Enterprise Application Platform 5.1.1 Redhat Jboss Enterprise Application Platform 4.3.0 Redhat Jboss Enterprise Application Platform 5.0.0 Redhat Jboss Enterprise Application Platform 5.1.0 Redhat Jboss Enterprise Application Platform 5.2.1 Redhat Jboss Enterprise Application Platform 5.2.0 Redhat Jboss Enterprise Application Platform 5.2.2 Redhat Jboss Enterprise Application Platform 5.0.1 Redhat Jboss Enterprise Application Platform 5.1.2 Redhat Jboss Enterprise Application Platform 4.2.0 Redhat Jboss Enterprise Application Platform

The JBoss Server in JBoss Enterprise Application Platform 5.1.x prior to 5.1.2 and 5.2.x prior to 5.2.2, Web Platform prior to 5.1.2, BRMS Platform prior to 5.3.0, and SOA Platform prior to 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseD...

Redhat Jboss Enterprise Application Platform 5.1.1 Redhat Jboss Enterprise Application Platform 5.1.0 Redhat Jboss Enterprise Application Platform 5.2.0 Redhat Jboss Enterprise Application Platform 5.2.1 Redhat Jboss Enterprise Soa Platform 5.1.0 Redhat Jboss Enterprise Soa Platform 5.0.2 Redhat Jboss Enterprise Soa Platform 5.0.1 Redhat Jboss Enterprise Soa Platform Redhat Jboss Enterprise Soa Platform 5.1.1 Redhat Jboss Enterprise Web Platform 5.1.0 Redhat Jboss Enterprise Brms Platform Redhat Jboss Enterprise Web Platform Redhat Jboss Enterprise Soa Platform 5.0.0

The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform prior to 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote malicious users to obtain plaintext data via a...

Redhat Jboss Enterprise Portal Platform 5.0.0 Redhat Jboss Enterprise Portal Platform 5.1.1 Redhat Jboss Enterprise Portal Platform 5.1.0 Redhat Jboss Enterprise Portal Platform Redhat Jboss Enterprise Portal Platform 5.2.0 Redhat Jboss Enterprise Portal Platform 5.0.1

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform prior to 5.1.2, SOA Platform prior to 5.2.0, BRMS Platform prior to 5.3.0, and Portal Platform prior to 4.3 CP07 perform access control only for the GET and POST methods, which allow remote malicious ...

Redhat Jboss Enterprise Application Platform 4.3.0 Redhat Jboss Enterprise Application Platform 5.0.1 Redhat Jboss Enterprise Application Platform 5.1.0 Redhat Jboss Enterprise Application Platform 4.2.0 Redhat Jboss Enterprise Application Platform Redhat Jboss Enterprise Application Platform 5.0.0 Redhat Jboss Enterprise Soa Platform 4.3.0 Redhat Jboss Enterprise Soa Platform 4.2.0 Redhat Jboss Enterprise Soa Platform 5.0.2 Redhat Jboss Enterprise Soa Platform 5.0.1 Redhat Jboss Enterprise Soa Platform 5.1.0 Redhat Jboss Enterprise Soa Platform Redhat Jboss Enterprise Soa Platform 5.0.0 Redhat Jboss Enterprise Brms Platform Redhat Jboss Enterprise Portal Platform

The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x prior to 5.2.2, and BRMS Platform prior t...

Redhat Jboss Enterprise Application Platform 4.3.0 Redhat Jboss Enterprise Application Platform 5.1.2 Redhat Jboss Enterprise Web Platform 5.1.2 Redhat Jboss Enterprise Portal Platform 5.2.1 Redhat Jboss Enterprise Portal Platform 4.3.0 Redhat Jboss Enterprise Brms Platform Redhat Jboss Enterprise Soa Platform 4.2.0 Redhat Jboss Enterprise Portal Platform 5.2.0 Redhat Jboss Enterprise Soa Platform 4.3.0

JGroups diagnostics service in JBoss Enterprise Portal Platform prior to 5.2.2, SOA Platform prior to 5.3.0, and BRMS Platform prior to 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnos...

Redhat Jboss Enterprise Portal Platform 5.1.1 Redhat Jboss Enterprise Portal Platform 5.1.0 Redhat Jboss Enterprise Portal Platform Redhat Jboss Enterprise Portal Platform 5.2.0 Redhat Jboss Enterprise Portal Platform 4.3.0 Redhat Jboss Enterprise Portal Platform 5.0.1 Redhat Jboss Enterprise Portal Platform 5.0.0 Redhat Jboss Enterprise Soa Platform 5.1.1 Redhat Jboss Enterprise Soa Platform 5.1.0 Redhat Jboss Enterprise Soa Platform 4.2.0 Redhat Jboss Enterprise Soa Platform Redhat Jboss Enterprise Soa Platform 4.3.0 Redhat Jboss Enterprise Soa Platform 5.0.0 Redhat Jboss Enterprise Soa Platform 5.0.2 Redhat Jboss Enterprise Soa Platform 5.0.1 Redhat Jboss Enterprise Brms Platform

Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform prior to 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users...

Redhat Jboss Enterprise Portal Platform 5.0.0 Redhat Jboss Enterprise Portal Platform 5.1.1 Redhat Jboss Enterprise Portal Platform 5.1.0 Redhat Jboss Enterprise Portal Platform Redhat Jboss Enterprise Brms Platform 5.3.0 Redhat Jboss Enterprise Portal Platform 5.2.0 Redhat Jboss Enterprise Soa Platform 5.3.0 Redhat Jboss Enterprise Portal Platform 5.0.1

« PREV 1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook