PT-2015-3933
CVE-2014-7853
·
تاريخ النشر
2015-02-13
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Red Hat JBoss Enterprise Application Platform (EAP) versions prior to 6.3.3
Description
The issue affects the JBoss Application Server (WildFly) JacORB subsystem, where it fails to properly assign socket-binding-ref sensitivity classification to the security-domain attribute. This allows remote authenticated users to obtain sensitive information by accessing the security-domain attribute.
Recommendations
For versions prior to 6.3.3, update to version 6.3.3 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾