PT-2013-1800
CVE-2012-5478
·
تاريخ النشر
2013-02-05
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.9
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
JBoss Enterprise Application Platform versions prior to 5.2.0
JBoss Web Platform versions prior to 5.2.0
JBoss BRMS Platform versions prior to 5.3.1
JBoss SOA Platform versions prior to 5.3.1
Description
The issue concerns improper access restriction in the AuthorizationInterceptor, allowing remote authenticated users to bypass intended role restrictions. This enables them to perform arbitrary JMX operations, although the specific vectors are not specified.
Recommendations
For JBoss Enterprise Application Platform versions prior to 5.2.0, update to version 5.2.0 or later.
For JBoss Web Platform versions prior to 5.2.0, update to version 5.2.0 or later.
For JBoss BRMS Platform versions prior to 5.3.1, update to version 5.3.1 or later.
For JBoss SOA Platform versions prior to 5.3.1, update to version 5.3.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾