CVE-2014-3472 in Red Hat JBoss Enterprise Application Platform정보

요약 (영어)

The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.

예약하다

2014. 05. 14.

공개

2014. 08. 19.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
70657	Red Hat JBoss Enterprise Application Platform Access Restriction isCallerInRole 권한 상승	264	정의되지 않음	정의되지 않음	CVE-2014-3472

설명

CPE

CWE

CVSS

익스플로잇

역사

차이

연결하다

위협 인텔리전스

API JSON

API XML

API CSV

◂ 이전개요다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!