CVE-2014-0093 in Red Hat JBoss Enterprise Application Platform

摘要 (英语)

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be granted the java.security.AllPermission permission and allows remote attackers to bypass intended access restrictions.

预定

2013-12-03

披露

2014-04-03

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
13022	Red Hat JBoss Enterprise Application Platform Java Security Manager 权限提升	264	未经证实	官方修复	CVE-2014-0093