The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, allowing remote attackers to obtain sensitive information
Reporter | Title | Published | Views | Family All 4 |
---|---|---|---|---|
![]() | Default configuration | 28 Oct 201321:55 | – | prion |
![]() | CVE-2013-2102 | 28 Oct 201321:00 | – | cvelist |
![]() | CVE-2013-2102 | 28 Oct 201321:55 | – | nvd |
![]() | JBoss Portal 6.1.0 Update (RHSA-2013:1437) | 31 Jan 201400:00 | – | nessus |
Source | Link |
---|---|
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
rhn | www.rhn.redhat.com/errata/RHSA-2013-1437.html |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo