CVE-2014-3518

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform version 5.2.0 Red Hat JBoss BRMS version 5.3.1 Red Hat JBoss Portal Platform version 5.2.2 Red Hat JBoss SOA Platform version 5.3.1

Description The issue is related to the improper implementation of the JSR 160 specification in the jmx-remoting.sar component of JBoss Remoting. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For Red Hat JBoss Enterprise Application Platform version 5.2.0, update to a version that properly implements the JSR 160 specification. For Red Hat JBoss BRMS version 5.3.1, update to a version that properly implements the JSR 160 specification. For Red Hat JBoss Portal Platform version 5.2.2, update to a version that properly implements the JSR 160 specification. For Red Hat JBoss SOA Platform version 5.3.1, update to a version that properly implements the JSR 160 specification.