Red Hat Security AdvisoryRHSA-2012:1028
JBoss Enterprise BRMS Platform 5.3.0 update
Released 2012-06-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- JBoss Enterprise BRMS Platform 5.3
Fixes 4 records
Priority LOW 39
The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03521 · Published 2012-11-23 · Partial fix CWE-264
Priority LOW 35
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0294 · Published 2012-11-23 · Fixed CWE-287
Priority LOW 24
The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to…
CVSS 2.0MEDIUM 4.6· Network · Low privileges · Interaction — · EPSS 0.01604 · Published 2012-11-23 · Partial fix CWE-264
Priority LOW 19
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows…
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.01448 · Published 2012-11-23 · Partial fix CWE-287