Read the docs
TI-2011-03603 Aliases CVE-2011-4085GHSA-24wp-35x7-5hx9

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before…

Priority LOW 35CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-287.

Summary

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.

Why it matters now

EPSS 0.0294 87th percentileScored 2026-11-07
Fix Fixed Red Hat: 8 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*up to 5.1.1VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:*:*:*:*:*:*:*4.2.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:*4.3.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*5.0.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:*5.1.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:*:*:*:*:*:*:*:*up to 5.1.1VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:*:*:*:*:*:*:*4.2.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp01:*:*:*:*:*:*4.2.0 cp01VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp02:*:*:*:*:*:*4.2.0 cp02VulnerableRed Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:* Versions up to 5.1.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:* Versions 5.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:* Versions 5.1.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:*:*:*:*:*:*:*:* Versions up to 5.1.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp01:*:*:*:*:*:* Versions 4.2.0 cp01 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp02:*:*:*:*:*:* Versions 4.2.0 cp02 Vulnerable ·Red Hat
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp03:*:*:*:*:*:*4.2.0 cp03VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp04:*:*:*:*:*:*4.2.0 cp04VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp05:*:*:*:*:*:*4.2.0 cp05VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:tp02:*:*:*:*:*:*4.2.0 tp02VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:*:*:*:*:*:*:*4.3.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp01:*:*:*:*:*:*4.3.0 cp01VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp02:*:*:*:*:*:*4.3.0 cp02VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp03:*:*:*:*:*:*4.3.0 cp03VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp04:*:*:*:*:*:*4.3.0 cp04VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp05:*:*:*:*:*:*4.3.0 cp05VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.0:*:*:*:*:*:*:*5.0.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.2:*:*:*:*:*:*:*5.0.2VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.1.0:*:*:*:*:*:*:*5.1.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*up to 5.2.0VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*up to 4.3.0VulnerableRed Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp03:*:*:*:*:*:* Versions 4.2.0 cp03 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp04:*:*:*:*:*:* Versions 4.2.0 cp04 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:cp05:*:*:*:*:*:* Versions 4.2.0 cp05 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:tp02:*:*:*:*:*:* Versions 4.2.0 tp02 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp01:*:*:*:*:*:* Versions 4.3.0 cp01 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp02:*:*:*:*:*:* Versions 4.3.0 cp02 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp03:*:*:*:*:*:* Versions 4.3.0 cp03 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp04:*:*:*:*:*:* Versions 4.3.0 cp04 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp05:*:*:*:*:*:* Versions 4.3.0 cp05 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.0:*:*:*:*:*:*:* Versions 5.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.1.0:*:*:*:*:*:*:* Versions 5.1.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:* Versions up to 5.2.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:* Versions up to 4.3.0 Vulnerable ·Red Hat

Remediation

Red Hat 8 advisories

  • RHSA-2012:1028 Released 2012-06-22 · Red Hat rating Important
    JBoss Enterprise BRMS Platform 5.3.0 update
    • JBoss Enterprise BRMS Platform 5.3
  • RHSA-2012:0091 Released 2012-02-02 · Red Hat rating Important
    JBoss Enterprise Portal Platform 4.3 CP07 update
    • Red Hat JBoss Portal 4.3
  • RHSA-2011:1822 Released 2011-12-14 · Red Hat rating Moderate
    JBoss Enterprise Portal Platform 5.2.0 update
    • Red Hat JBoss Portal 5
Show 5 more Red Hat advisories
  • RHSA-2011:1805 Released 2011-12-08 · Red Hat rating Low
    JBoss Enterprise Application Platform 5.1.2 update
    • Red Hat JBoss Enterprise Application Platform 5.1
  • RHSA-2011:1800 Released 2011-12-08 · Red Hat rating Low
    JBoss Enterprise Application Platform 5.1.2 update
    • Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS apache-cxf-2.2.12-4.patch_02.1.1.ep5.el4, cglib-2.2-5.3.ep5.el4, facelets-1.1.15-3.B1_patch_01.2.ep5.el4 +47
    • Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES apache-cxf-2.2.12-4.patch_02.1.1.ep5.el4, cglib-2.2-5.3.ep5.el4, facelets-1.1.15-3.B1_patch_01.2.ep5.el4 +47
  • RHSA-2011:1799 Released 2011-12-08 · Red Hat rating Low
    JBoss Enterprise Application Platform 5.1.2 update
    • Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server apache-cxf-2.2.12-4.patch_02.1.1.ep5.el5, cglib-2.2-5.3.ep5.el5, facelets-1.1.15-3.B1_patch_01.2.ep5.el5 +47
  • RHSA-2011:1798 Released 2011-12-08 · Red Hat rating Low
    JBoss Enterprise Application Platform 5.1.2 update
    • Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server apache-cxf-2.2.12-4.patch_02.1.ep5.el6, cglib-2.2-5.5.ep5.el6, facelets-1.1.15-3.B1_patch_01.2.ep5.el6 +47
  • RHSA-2011:1456 Released 2011-11-16 · Red Hat rating Moderate
    JBoss Enterprise SOA Platform 5.2.0 update
    • Red Hat JBoss SOA Platform 5.1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
JBoss Enterprise BRMS Platform 5.3Fixed RHSA-2012:1028
Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 ServerFixed RHSA-2011:1799
Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 ServerFixed RHSA-2011:1798
Red Hat JBoss Enterprise Application Platform 5.1Fixed RHSA-2011:1805
Red Hat JBoss Portal 4.3Fixed RHSA-2012:0091
Red Hat JBoss Portal 5Fixed RHSA-2011:1822
Red Hat JBoss SOA Platform 5.1Fixed RHSA-2011:1456

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-4085
  2. 2026-10-03 Alias added: GHSA-24wp-35x7-5hx9

References

Advisory 8

Other 1

  • TI-2017-08941 Deserialization of untrusted data in Red Hat jbossas KEVCVSS 3.1CRITICAL 9.8
  • TI-2010-01790 JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for… KEVCVSS 3.1HIGH 8.8
  • TI-2017-09342 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2010-01383 The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application… KEVCVSS 3.1HIGH 7.5
  • TI-2017-09354 XML external entity injection in Apache Solr before 7.1 with Apache Lucene before 7.1 CVSS 3.1CRITICAL 9.8
See all 243 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences