Red Hat Security AdvisoryRHSA-2010:0377
JBoss Enterprise Application Platform 4.3.0.CP08 update
Released 2010-04-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS hibernate3-1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4, hibernate3-annotations-3.3.1-1.12.GA_CP03.ep1.el4, hibernate3-annotations-javadoc-3.3.1-1.12.GA_CP03.ep1.el4 +20
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES hibernate3-1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4, hibernate3-annotations-3.3.1-1.12.GA_CP03.ep1.el4, hibernate3-annotations-javadoc-3.3.1-1.12.GA_CP03.ep1.el4 +20
Fixes 3 records
Priority CRITICAL 90KEV
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST met…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.52654 · Published 2010-04-28 · Fixed CWE-749
Priority HIGH 81KEV
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST metho…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.73815 · Published 2010-04-28 · Fixed CWE-749
Priority MEDIUM 55
Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request t…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.53728 · Published 2010-04-28 · Fixed CWE-264
THREATIST.IORead the docs