CVE-2011-4608 in JBoss Enterprise Application Platform

Sumário (Inglês)

mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from an external vhost that does not enforce security constraints.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

29/11/2011

Divulgação

27/01/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
60027	Red Hat JBoss Enterprise Application Platform mod_cluster Elevação de Privilégios	264	Não definido	Não definido	CVE-2011-4608

Fontes

• MITRE
• NVD
• CVE Details