Vulnerability in Jboss Jboss_application_server
CVE-2007-1354
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of the current user, which allows remote authenticated admini…
EPSS: 0.015 (71.3th percentile) — read the EPSS interpretation.
Affected products
- Jboss Jboss_application_server — versions 4.0.2.ga_cp02, 4.0.2.ga_cp03, 4.0.2.ga_cp04
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Patch)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)