Lucene search

[email protected]CVE-2014-0005

HistoryFeb 20, 2015 - 4:59 p.m.

CVE-2014-0005

2015-02-2016:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-0005

picketbox

jbosssx

red hat jboss eap

brms

remote users

authentication

application configuration

server state

8.7 High

AI Score

Confidence

High

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

60.4%

JSON

PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever configuration and state by deploying a crafted application.

CPENameOperatorVersion
redhat:jboss_enterprise_brms_platformredhat jboss enterprise brms platformle6.0.3
redhat:jboss_enterprise_application_platformredhat jboss enterprise application platformeq6.2.2

CPE	Name	Operator	Version
redhat:jboss_enterprise_brms_platform	redhat jboss enterprise brms platform	le	6.0.3
redhat:jboss_enterprise_application_platform	redhat jboss enterprise application platform	eq	6.2.2

References

rhn.redhat.com/errata/RHSA-2014-0343.html

rhn.redhat.com/errata/RHSA-2014-0344.html

rhn.redhat.com/errata/RHSA-2014-0345.html

rhn.redhat.com/errata/RHSA-2015-0234.html

rhn.redhat.com/errata/RHSA-2015-0235.html

rhn.redhat.com/errata/RHSA-2015-0720.html

8.7 High

AI Score

Confidence

High

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

60.4%

JSON

Related for CVE-2014-0005

prion1 nessus2 redhat6