Read the docs
Red Hat Security Advisory

RHSA-2016:1785

Red Hat JBoss Operations Network 3.3.7 security and bug fix update

Released 2016-08-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 42

The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a cr…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02139 Published 2016-09-07 Fixed CWE-264